audacity.exe

Useful Software

This is the Verti bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application audacity.exe by Useful Software has been detected as adware by 2 anti-malware scanners. The program is a setup application that uses the Verti Setup installer. The file has been seen being downloaded from inst.allfree-apps.net and multiple other hosts.
Publisher:
Useful Software  (signed and verified)

Version:
1.0.0.1

MD5:
b0cfc9113ca3c79d432c09cd39e0e394

SHA-1:
b59fb5b3852773341fe528dad9f33e24a59000e8

SHA-256:
d0eb1b9ae5de3543efcc63f5e447f8d258fbb348a07446beecee946685b486f9

Scanner detections:
2 / 68

Status:
Adware

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
4/23/2024 7:16:57 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Verti (variant)
8.9670

VIPRE Antivirus
Rocketfuel Installer
28208

File size:
367.4 KB (376,264 bytes)

Product version:
1.0.0.1

File type:
Executable application (Win64 EXE)

Bundler/Installer:
Verti Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\audacity.exe

Digital Signature
Signed by:

Subject:
CN=Useful Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Useful Software, L=Bellevue, S=Washington, C=US

Serial number:
7DB9B4E338BDCF4F909F675C098B0E76

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:R4+MixC0NSs6FHtHwotSUOF5bGiExOEO71TgSAOr5LqE1cxfro7zF1W+LVy5p6aO:RF+0cNt/MUOFQ5xYaSV5LqE1cxfro7zf

Entry point:
E8, 7E, A7, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 90, 10, 45, 00, 33, C5, 89, 45, FC, 83, 7D, 08, FF, 57, 74, 09, FF, 75, 08, E8, 09, 86, 00, 00, 59, 83, A5, E0, FC, FF, FF, 00, 6A, 4C, 8D, 85, E4, FC, FF, FF, 6A, 00, 50, E8, EB, B3, FF, FF, 8D, 85, E0, FC, FF, FF, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF, FF, 89, 9D, D4, FD, FF, FF, 89, B5, D0, FD, FF, FF, 89, BD, CC...
 
[+]

Entropy:
6.3847

The file audacity.exe has been seen being distributed by the following 38 URLs.

http://inst.allfree-apps.net/dl/92/14557/1034/.../

http://inst.allfree-apps.net/dl/92/14636/1164/.../

http://inst.allfree-apps.net/dl/92/17482/1034/.../

Latest 30 of 38 download URLs

Remove audacity.exe - Powered by Reason Core Security