| File name: | freevideocutterjoiner.exe |
| Full analysis: | https://app.any.run/tasks/bf03b2b6-68b6-4a9b-8ecb-37065899e0f1 |
| Verdict: | Malicious activity |
| Analysis date: | May 17, 2024, 06:51:23 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Indicators: | |
| MIME: | application/x-dosexec |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5: | 34D8913142BA2AEE57D623D20A3F96B9 |
| SHA1: | 88D85FBC175E89143A8EF7E7560E15276E23325C |
| SHA256: | 4B51C135D23E0C2F3854F7E8DEE766B22E925C1192735960CE79A5F69C45D685 |
| SSDEEP: | 98304:igP+ElZ6hYN93yUofjnsLR0ESXHkYHPdERlhX43csXUHfSKTCUXJuPw+4DnVmjUq:LDwbOBr8NG/r1XJ2MAeGAB9YYDQ |
| .exe | | | Win32 Executable Delphi generic (45.2) |
|---|---|---|
| .dll | | | Win32 Dynamic Link Library (generic) (20.9) |
| .exe | | | Win32 Executable (generic) (14.3) |
| .exe | | | Win16/32 Executable Delphi generic (6.6) |
| .exe | | | Generic Win/DOS Executable (6.3) |
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2016:04:06 11:36:38+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 2.25 |
| CodeSize: | 66560 |
| InitializedDataSize: | 58368 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x117dc |
| OSVersion: | 5 |
| ImageVersion: | 6 |
| SubsystemVersion: | 5 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 0.0.0.0 |
| ProductVersionNumber: | 0.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Neutral |
| CharacterSet: | Unicode |
| Comments: | This installation was built with Inno Setup. |
| CompanyName: | DVDVideoMedia, Inc. |
| FileDescription: | Free Video Cutter Joiner Setup |
| FileVersion: | |
| LegalCopyright: | |
| ProductName: | Free Video Cutter Joiner |
| ProductVersion: | 2023.3 |
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1020 | "C:\Users\admin\AppData\Local\Temp\freevideocutterjoiner.exe" /SPAWNWND=$50122 /NOTIFYWND=$20138 | C:\Users\admin\AppData\Local\Temp\freevideocutterjoiner.exe | freevideocutterjoiner.tmp | ||||||||||||
User: admin Company: DVDVideoMedia, Inc. Integrity Level: HIGH Description: Free Video Cutter Joiner Setup Exit code: 0 Version: Modules
| |||||||||||||||
| 1080 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1324 --field-trial-handle=1348,i,14533286750350530046,3881412030775154700,131072 /prefetch:2 | C:\Program Files\Microsoft\Edge\Application\msedge.exe | — | msedge.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: LOW Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 1344 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=3672 --field-trial-handle=1348,i,14533286750350530046,3881412030775154700,131072 /prefetch:8 | C:\Program Files\Microsoft\Edge\Application\msedge.exe | — | msedge.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: LOW Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 1424 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1420 --field-trial-handle=1348,i,14533286750350530046,3881412030775154700,131072 /prefetch:3 | C:\Program Files\Microsoft\Edge\Application\msedge.exe | msedge.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 1680 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=109.0.5414.149 "--annotation=exe=C:\Program Files\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win32 "--annotation=prod=Microsoft Edge" --annotation=ver=109.0.1518.115 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd8,0x698cf598,0x698cf5a8,0x698cf5b4 | C:\Program Files\Microsoft\Edge\Application\msedge.exe | — | msedge.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 1876 | "C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\Free Video Cutter Joiner.exe" | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\Free Video Cutter Joiner.exe | — | freevideocutterjoiner.tmp | |||||||||||
User: admin Company: DVDVideoMedia Integrity Level: MEDIUM Description: Free Video Cutter Joiner Version: 10.0 Modules
| |||||||||||||||
| 2024 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.dvdvideomedia.com/ | C:\Program Files\Microsoft\Edge\Application\msedge.exe | freevideocutterjoiner.tmp | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 2052 | "C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1640 --field-trial-handle=1348,i,14533286750350530046,3881412030775154700,131072 /prefetch:8 | C:\Program Files\Microsoft\Edge\Application\msedge.exe | — | msedge.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: LOW Description: Microsoft Edge Exit code: 0 Version: 109.0.1518.115 Modules
| |||||||||||||||
| 2104 | "C:\Users\admin\AppData\Local\Temp\is-92BQQ.tmp\freevideocutterjoiner.tmp" /SL5="$3013A,12590976,125952,C:\Users\admin\AppData\Local\Temp\freevideocutterjoiner.exe" /SPAWNWND=$50122 /NOTIFYWND=$20138 | C:\Users\admin\AppData\Local\Temp\is-92BQQ.tmp\freevideocutterjoiner.tmp | freevideocutterjoiner.exe | ||||||||||||
User: admin Integrity Level: HIGH Description: Setup/Uninstall Exit code: 0 Version: 51.1052.0.0 Modules
| |||||||||||||||
| 2168 | "C:\Program Files\Windows Media Player\wmpnscfg.exe" | C:\Program Files\Windows Media Player\wmpnscfg.exe | — | explorer.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Media Player Network Sharing Service Configuration Application Exit code: 0 Version: 12.0.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | Owner |
Value: 38080000B4DBACA926A8DA01 | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | SessionHash |
Value: A3FF8C8A07C09EA9FC1766BDE82258BC25F6DBE9E046123FC60AF5E2705D194B | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | Sequence |
Value: 1 | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | RegFiles0000 |
Value: C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\Free Video Cutter Joiner.exe | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000 |
| Operation: | write | Name: | RegFilesHash |
Value: EC6D27483728DD8EC5C23008F3D46C815E466BF3AC6ABE579B8C5BCE0A8E62B8 | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1E54E41-DC33-4434-94CA-E409AB1DB73A}}_is1 |
| Operation: | write | Name: | Inno Setup: Setup Version |
Value: 5.5.9 (u) | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1E54E41-DC33-4434-94CA-E409AB1DB73A}}_is1 |
| Operation: | write | Name: | Inno Setup: App Path |
Value: C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1E54E41-DC33-4434-94CA-E409AB1DB73A}}_is1 |
| Operation: | write | Name: | InstallLocation |
Value: C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\ | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1E54E41-DC33-4434-94CA-E409AB1DB73A}}_is1 |
| Operation: | write | Name: | Inno Setup: Icon Group |
Value: DVDVideoMedia | |||
| (PID) Process: | (2104) freevideocutterjoiner.tmp | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1E54E41-DC33-4434-94CA-E409AB1DB73A}}_is1 |
| Operation: | write | Name: | Inno Setup: User |
Value: admin | |||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\is-H3F82.tmp | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\is-RP1JQ.tmp | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\avformat-58.dll | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\is-C327S.tmp | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\swscale-5.dll | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\unins000.exe | executable | |
MD5:1D8A82680BF4DC7E6D4AF996EC044518 | SHA256:C1BB6AD541F8722FB02535BA59462E2315D8615006FCBA1717CE6F0DA47FA319 | |||
| 3964 | freevideocutterjoiner.exe | C:\Users\admin\AppData\Local\Temp\is-K9UEQ.tmp\freevideocutterjoiner.tmp | executable | |
MD5:027423E1E1B220BF713D0906840F63A8 | SHA256:B43139FC5B8CDFBFAADF182EB37913D6AAF8D810C4185B7685A070AC3C409225 | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\is-7HBT4.tmp | — | |
MD5:— | SHA256:— | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\Free Video Cutter Joiner.exe | executable | |
MD5:F4C826288963832AD64F4B30713EB156 | SHA256:D2BC468339C2B52F806AE9153425A546225ACAED594164891875A4780BFC7E3A | |||
| 2104 | freevideocutterjoiner.tmp | C:\Program Files\DVDVideoMedia\Free Video Cutter Joiner\is-EVR8H.tmp | executable | |
MD5:D480A2C8F31EE255CBECB61913F429C8 | SHA256:C51F2FA976E4105690A618D49A80655FA2F85047FF0C0AAE3546ED44E19BFB3F | |||
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/ | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/contactus.png | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/filehorse.png | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/index.css | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/jquery.min.js | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/banner.js | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/avcutterjoinersuite.jpg | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/free-video-cutter-joiner.jpg | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/free-mp3-cutter-joiner.jpg | unknown | — | — | unknown |
1424 | msedge.exe | GET | 200 | 107.180.39.226:80 | http://www.dvdvideomedia.com/images/videoconverter.jpg | unknown | — | — | unknown |
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 224.0.0.252:5355 | — | — | — | unknown |
1088 | svchost.exe | 224.0.0.252:5355 | — | — | — | unknown |
2024 | msedge.exe | 239.255.255.250:1900 | — | — | — | unknown |
1424 | msedge.exe | 13.107.42.16:443 | config.edge.skype.com | MICROSOFT-CORP-MSN-AS-BLOCK | US | whitelisted |
1424 | msedge.exe | 107.180.39.226:80 | www.dvdvideomedia.com | AS-26496-GO-DADDY-COM-LLC | US | unknown |
1424 | msedge.exe | 13.107.21.239:443 | edge.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | US | unknown |
1424 | msedge.exe | 142.250.74.200:443 | www.googletagmanager.com | GOOGLE | US | unknown |
1424 | msedge.exe | 172.67.27.172:443 | taimienphi.vn | CLOUDFLARENET | US | unknown |
Domain | IP | Reputation |
|---|---|---|
www.dvdvideomedia.com |
| unknown |
config.edge.skype.com |
| whitelisted |
edge.microsoft.com |
| whitelisted |
www.googletagmanager.com |
| whitelisted |
taimienphi.vn |
| whitelisted |
apps.apple.com |
| whitelisted |
apppearl.com |
| unknown |
fixthephoto.com |
| unknown |
free-mp3-cutter-joiner.software.informer.com |
| unknown |
free-video-cutter-joiner.software.informer.com |
| unknown |