home

free-audio-converter-5-0-17-825-es-en-fr-de-it-cn-jp-win.exe

Free Audio Converter 5.0.17.825

DVDVideoSoft Ltd.

The application free-audio-converter-5-0-17-825-es-en-fr-de-it-cn-jp-win.exe, “Free Audio Converter 5.0.17.825 Setup ” by DVDVideoSoft has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
DVDVideoSoft Ltd.   (signed by DVDVideoSoft Ltd.)

Product:
Free Audio Converter 5.0.17.825

Description:
Free Audio Converter 5.0.17.825 Setup

Version:
5.0.17.825

MD5:
4747058617c7c95bbfca1c0fbc59a1c0

SHA-1:
36310a5a5e4513102365da99eb0be48a9aef0296

SHA-256:
35ee173b41500527a548f347ad5780a7dd5d5c2ce3211a72012a6015228024ae

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/25/2024 2:08:30 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy
8.10439

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.12.1.15

File size:
25.1 MB (26,324,584 bytes)

Product version:
5.0.17.825

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\free-audio-converter-5-0-17-825-es-en-fr-de-it-cn-jp-win.exe

Digital Signature
Signed by:
DVDVideoSoft Ltd.

Authority:
GlobalSign nv-sa

Valid from:
7/16/2010 7:34:18 AM

Valid to:
7/16/2013 7:34:16 AM

Subject:
E=question@dvdvideosoft.com, CN=DVDVideoSoft Ltd., O=DVDVideoSoft Ltd., L=Roseau Valley, S=Dominica, C=DM

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000129DA2C9832

File PE Metadata
Compilation timestamp:
12/20/2011 2:16:50 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:6BqfEoBh6ERN8v26BZa8QGkNntX4rlw/B8R/NNNF:6BJoL6ERS24gKknaw/B8RZF

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file free-audio-converter-5-0-17-825-es-en-fr-de-it-cn-jp-win.exe has been seen being distributed by the following 8 URLs.

http://dw.uptodown.com/dl/1420061693/.../free-audio-converter-5-0-17-825-es-en-fr-de-it-cn-jp-win.exe

http://dw.uptodown.com/dwn/Cw7SRS5T3cmi-YA6RASTmnX4A1no7Wxffh01X-V9sVAYxpz5EODAI94c8P-ZKHdh5w3k2pqFSFBm-ToLiQdw9C2VXIBJJxKdjjq4FVO4JDeKmWxG7-0PK7wMGTcPuUzt/hsdNv7z5jrFNl5sDuIz_l386jX8Tob-dVXKn5eBGIjha46_kfEac7PZ9FNLctFaty74EGQiZvMeHZHZWQdz-atJHrMwjsOyc3EsefKv1tL23fcwcY1RVs9THf9uCAZdF/EovoptLMXYqhQX5t2DzwuQme52BVZOi2BOZ4_lIRqzdFcCK06ywkpYvJbhNkf-eSiBvoUm00g16rcFAnzFNNvfYa7pA5RFtfWLA89OvdoBEIf1VPti5y9XuwYjoQ0siS/.../

http://dw.uptodown.com/dwn/YDNRJPf94MPMZFw1Lw9C3r-AXeaIuL7xl5VUdMLq5qg3zGC-_IGNPGCJhu85Pm3DJ-FbawgRrH9pDBfE59b7MB0s-TBtuGnlwacrjYH09tiOytdY6Jbi_64cW1krU8ZO/3l6Yha-V3NLwHutcxlTTqo57v8FQ-N692ONUI7QnS5xeHw-MHqqaikW5xZpbOG0UWwtIDaOgeAO7x2fggUGdm2H8YbIqGOGRT_AAeX6pl9ozRIsY8qJ9gQTQgXd1ThlB/kVJ6FfAi87coY3lVgk6bdY1HmloZHfn67_Z0NawytRbAQ2dc5gW0_E3Xvh9ieCd6CpLAgAVZ2WkY656w8alcm32CeDj1GNReCDONP_wsM1pUk6rwiMQuZizva6AMqSb1/.../

http://dw.uptodown.com/dwn/O13uahETdxJ03OXIe7iukVahxu4a6myQOTfx5txYE7tdLxaRCkBuxi1VVUpX4o5LOHp00iX65E3RFkIlUHck6z7-rOghJPSCqRTNV2Yduk9lIjxE5Xm-RUjtf9J9L89q/HypbnZlq0qxDwoxqFwyQco0BA4eRMSVNjAU46ULE-Qocrtex_JEGQpFovoLP9j4-b3GJw9ncRm2jzwCm_u61kOOM0mTnwRWVzgLQgRSgfKk26JKRdZdzA5Rc1hzLzJ6t/0Kz3ckQZW84F7GweCzrEZyk6zeFcGwjtqKZogF6H-0kdFjGddt7NfyNSXtEPAHoFfdV1EU7xnxNQxJOtzrnfaair2Un6chlqCs_F_P79z2fEa0ASMg890gIFbSthTTlg/.../

http://dw.uptodown.com/dwn/ZzdnkG2VMKVvkL_6FcIgyJPAgdBrPrBFVp7TWhoxyqFnoPX7bUs80O4dwW0mDkH5D0cD9ZoehztM08PAd4Vht0PbWhlFBC3FFEwRBcAD0NgTTiFo-sAadx-fsjS1vdKI/CWykJ7ldjAWOiE6NKgJeIOeORwMc-VGT7nk1mxO0-kNuVi1Kd6TasTaYCpnGoEokLxRasW0e3jtDCRmeeI-eh8eWiJ-jPpMnsm5mP00GwXSbdFbMKhjqR3P-08ApszNv/747x6vWvz5vBDc233gDOPegablUjOxQrgeW9QFzZwP0BGEIjPyRS96OoBhLjvFnGeHR0lmkVSZaYMwIf9AuTskYDFToJDJbkGT3aspDEPGrE3iZjVh63AKJG56GleN7-/.../

http://dw.uptodown.com/dwn/fRSeyjQbmkj1mKb4aVT7WkYS7RV1zI7Ue47CXv-BbghXjWiga8D8pRlIGwu0_SrBkpyabiHB2Z_TN7T-Nug4wk9NNqnbKUZcjbfbOxUdduO5qN6fEvlaVDsA0X2z94FL/W8Z1x0DDB4uEdwF82eSvk0MKWM8-vykcF1HTTaUYqA_yA98qe6V5jyjY6hiJ37sJq6NzIlkVz8VZFyeDXsZDkKT4SHb3Voqbmwli4x_rXDebYlSZ6xR2dcfV8Zr5xJlZ/_XzTnhB_yfDyPUECC8nn1qxo_PUgiY4pdwyQD1Fqtz1tZGcKyUqqVDrl42J-5PuN5u23TwEn9sWWwvEPc0SU_vOUIGvnaLWEwXwGJ-xbZRAKpvOWPCuWWH4M0TWAIMyd/.../

https://dw.uptodown.com/dwn/qazS7HGwUgZXWRlvZdjuZPy3OBQnAX-pcqMbcNy4QVq_EvblfXIdwWrvpEk4Yfh59MYG2kVAbBGtEs5TvGfguKxljjjLCCMlosrHxtKUIEwjpsiriyiz0fMGE9jY5fKT/JCB5ip6NY3bIP5i3PZLHdRuyyquMwaGxnxGUcnFFSPcYRU0EWXOAk39ZygZOZGgqDXouL386FiRBzNKfmkuUPPUAj9j1WB6p4GRcVKHzurKOHh2GS07BpKklnxf23czW/7SapowyFhmrvElcnZQCOkDgWyIReetf4nlDHGgMbEhlVHrDDzzCyDlh2EC4pAM8kzc1sE8vDn-sIEog8mkrGpiUD9hY9OX8KQEfdvPFXmuoh-kY2vH-GwVMIIZ3-8F7R/.../

http://download.dvdvideosoft.com/FreeAudioConverter.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.