The 4kyoutubetomp3 25 1 0 x64 online exe (4K YouTube to MP3) InterPromo GMBH File Malware Analysis

The 4kyoutubetomp3_25.1.0_x64_online.exe (4K YouTube to MP3) File Analysis

Updated 3 months ago

Checked by Malware Check

4kyoutubetomp3_25.1.0_x64_online.exe

Technical Analysis

File Name	4kyoutubetomp3_25.1.0_x64_online.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-05-26 18:00:15 UTC

✓

Clean File

No threats detected by our scanner

0%

Detection Rate

849,888

File Size (bytes)

2025-05-26

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	4864d9e81e7d31a5c8b793fa9194a028
SHA1	2c45f92b5a0adb809cb0dc8b8324c917beeebd1e
SHA256	54873cbad1bd8253dea4e44bbd64a7e569048655679bd1c92143d6f2a991c1fc
SHA512	b1929f6b19b6be0f8dae0125837d586fbe007ee01d6b72a023fd28d142e60061e28ce7877d9433be958bee72357ec3047b29d8a212625ea43acb86116f3aa5cd
ImpHash	42d651751c1d75ed4fa8fe71751854ff

PE Analysis

Basic Information

▼

Icon	Hash: 4e156f356ca8b4c03a792e076dee4d33 Fuzzy: 11eab7dc7ee7f6246ef6ffead50cbee3 dHash: f8e4e0cc8ce4cef0
Image Base	`0x00400000`
Entry Point	`0x0042df71`
Compilation Time	2019-09-17 05:33:38
Checksum	0x000d0bd7 (Actual: 0x000d0bd7)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\agent\_work\66\s\build\ship\x86\burn.pdb`
Digital Signature	OK
Imports	8 libraries ADVAPI32, USER32, OLEAUT32, GDI32, SHELL32, ole32, KERNEL32, RPCRT4
Exports	0 functions
Resources	12 Resources
Sections	6 Sections

Version Information

▼

CompanyName	InterPromo GMBH
FileDescription	4K YouTube to MP3
FileVersion	25.1.0.196
InternalName	setup
LegalCopyright	Copyright (c) InterPromo GMBH. All rights reserved.
OriginalFilename	4kyoutubetomp3_25.1.0_x64_online.exe
ProductName	4K YouTube to MP3
ProductVersion	25.1.0.196
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	298,999 bytes	299,008 bytes	6.57 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C66F549D5FC7D10A5F63350701C6B3F9`
`.rdata`	`0x0004a000`	128,864 bytes	129,024 bytes	5.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5A2F02DBBBDA51CFAC50FB52CEA6D11B`
`.data`	`0x0006a000`	5,884 bytes	2,560 bytes	3.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8FE8BA25B04A7BEB04C2AB2D5E9EA736`
`.wixburn`	`0x0006c000`	56 bytes	512 bytes	0.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DF5973523F5D51B8A2221B45FC863F9E`
`.rsrc`	`0x0006d000`	202,536 bytes	202,752 bytes	6.07 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2BFBA5B2CA56930A5035480F9DA9C608`
`.reloc`	`0x0009f000`	15,824 bytes	15,872 bytes	6.79 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`7CC10E0060080262550138057FD6B87D`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 12 (201,819 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	8	189,319 bytes	93.8%
RT_MESSAGETABLE	1	10,304 bytes	5.1%
RT_GROUP_ICON	1	118 bytes	0.1%
RT_VERSION	1	844 bytes	0.4%
RT_MANIFEST	1	1,234 bytes	0.6%

Certificate Chain Analysis

▼

Certificate Information

Product	4K YouTube to MP3
Description	4K YouTube to MP3
File Version	25.1.0.196
Original Name	4kyoutubetomp3_25.1.0_x64_online.exe
Signing Date	02:10 PM 05/12/2025 (111 days ago)
Verification Status	Signed
Signers	InterPromo GMBH; Microsoft ID Verified CS AOC CA 02; Microsoft ID Verified Code Signing PCA 2021; Microsoft Identity Verification Root Certificate Authority 2020
Counter Signers	Microsoft Public RSA Time Stamping Authority; Microsoft Public RSA Timestamping CA 2020; Microsoft Identity Verification Root Certificate Authority 2020
Internal Name	setup
Copyright	Copyright (c) InterPromo GMBH. All rights reserved.

Certificate Chain Summary

Microsoft Identity Verification Root Certificate Authority 2020 #1 Primary

Validity Period: 2020-04-16 18:36:16 → 2045-04-16 18:44:40

Signature Algorithm: sha384RSA

Serial Number: 54 98 D2 D1 D4 5B 19 95 48 13 79 C8 11 C0 87 99

InterPromo GMBH #2 Chain

Validity Period: 2025-05-11 19:37:51 → 2025-05-14 19:37:51

Signature Algorithm: sha384RSA

Serial Number: 33 00 03 A6 C0 BF 5A 95 90 31 A0 3C 2C 00 00 00 03 A6 C0

Microsoft ID Verified CS AOC CA 02 #3 Chain

Validity Period: 2021-04-13 17:31:52 → 2026-04-13 17:31:52

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 04 96 50 4B D2 DB EE CB 88 00 00 00 00 00 04

Microsoft ID Verified Code Signing PCA 2021 #4 Chain

Validity Period: 2021-04-01 20:05:20 → 2036-04-01 20:15:20

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 07 87 A3 34 A3 7B A5 8E 1C 00 00 00 00 00 07

Microsoft Public RSA Timestamping CA 2020 #5 Chain

Validity Period: 2020-11-19 20:32:31 → 2035-11-19 20:42:31

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 05 E5 CF 0F FF 66 2E C9 87 00 00 00 00 00 05

Microsoft Public RSA Time Stamping Authority #6 Chain

Validity Period: 2025-02-27 19:40:19 → 2026-02-26 19:40:19

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 4F 34 B5 07 C1 2B 97 54 FC 00 00 00 00 00 4F

Microsoft Public RSA Time Stamping Authority #7 Chain

Validity Period: 2025-02-27 19:40:17 → 2026-02-26 19:40:17

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 4E A3 C6 0E 3E 31 C3 74 27 00 00 00 00 00 4E

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now

Gridinsoft Anti-Malware