home

freevideodub.exe

Free Video Dub 2.0.22.925

DVDVideoSoft Ltd.

The application freevideodub.exe, “Free Video Dub 2.0.22.925 Setup ” by DVDVideoSoft has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from f.sync.hamicloud.net and multiple other hosts.
Publisher:
DVDVideoSoft Ltd.   (signed by DVDVideoSoft Ltd.)

Product:
Free Video Dub 2.0.22.925

Description:
Free Video Dub 2.0.22.925 Setup

Version:
2.0.22.925

MD5:
f2c759a503c2cbcbb85f557431a1c719

SHA-1:
13784daadb21b4c5712f1ffecbf2eb0964fc8256

SHA-256:
121edf7fd5cccb49a004c9694de7d36dd01c70cb1d6769e1ada6a4485b7521a8

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/26/2024 7:16:55 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy
8.9601

Malwarebytes
PUP.Optional.OpenCandy
v2014.03.28.11

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.29.13

File size:
23.9 MB (25,013,552 bytes)

Product version:
2.0.22.925

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freevideodub.exe

Digital Signature
Signed by:
DVDVideoSoft Ltd.

Authority:
GlobalSign nv-sa

Valid from:
4/24/2013 4:43:53 PM

Valid to:
4/24/2016 4:43:53 PM

Subject:
E=question@dvdvideosoft.com, CN=DVDVideoSoft Ltd., O=DVDVideoSoft Ltd., S=Dominica, C=DM

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11212661F5B10172D0E730C0D1F1213115FF

File PE Metadata
Compilation timestamp:
1/30/2013 3:21:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:KnchH+VySQSVtf9ECsekdSAVXZ7dQCGoUijmsDp44FTw+jVbPM7quI8ZtjpCWNyr:K+H+VyBotf2CUZVXLQYpmEpCUI+h0tF8

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file freevideodub.exe has been seen being distributed by the following 18 URLs.

http://f.sync.hamicloud.net/.../@download?f4dae2b0f50530b2932103f2bf0bd6ee&7ac542b12271b87915550bec6afd8420

http://dl.cdn.chip.de/downloads/.../FreeVideoDub2.0.22.925.exe

http://f.sync.hamicloud.net/.../@download?6f66c0c7211107fce3c317ab00f02c3f&f417cabbdde6278ada5d0c304bfa586f

http://www.afterdawn.com/software/general/.../free_video_dub?mirror_id=0&version_id=69205&software_id=4818

http://f.sync.hamicloud.net/.../@download?e8899990da106bfe9a82488adcc314e8&6a1a149bd7b6d6cd8dae94dcfd9b0285

http://dl15.afterdawn.com/download/e2a4fc17403f54291c40047163403d0b/57f77a7f/.../FreeVideoDub_v2.0.22.925.exe

http://f.sync.hamicloud.net/.../@download?9f9911fc792c2ef64fb859e936121edd&9b9a24e52a536f29cdc5f4589b6e8d6e

http://f.sync.hamicloud.net/.../@download?9150ca36caa2d932cf4816f3356ba442&6ec2684b8594f2eee4bde65586ca44ce

http://f.sync.hamicloud.net/.../@download?9e4821f35e4eb68ea3609f01e7236595&72b544d7e33257f2d676a4ed71b78157

http://f.sync.hamicloud.net/.../@download?89a3d01262376852afa376c6559dbdf6&0ace6d9e38d2c974badd66364b600164

http://f.sync.hamicloud.net/.../@download?e49cfa063b630670375b5967dc40793f&93bbc6e2ce9cd5c8b260a2cb73e6a57b

http://www.programosy.pl/.../pobierz,free-video-dub,2.html

http://f.sync.hamicloud.net/.../@download?ddd2932c7cf3d46aa7641f1ba5d5f172&318f6405f335613e614ba68a3308fd57

http://f.sync.hamicloud.net/.../@download?97f5d61ca61fcc3ccdb3f15a34db81ff&8c1150e7adb30b3fb1a455ddb65afdc4

http://f.sync.hamicloud.net/.../@download?30b5818de25af962b912ffcb3af7d25d&f7d2daa6896521865379ca1ae9d921d8

http://f.sync.hamicloud.net/.../@download?2d5519e9525e59f207b0142dc93c82c1&6f6eca68d9872ffa6633d0a4aa5f8c52

http://www.afterdawn.com/software/.../download.cfm?version_id=69205&software_id=4818&mirror_id=0&installer=0&perion=0&air_installer=0

http://f.sync.hamicloud.net/.../@download?5f3ad3a2a183ea8b444e6d98244203e7&d66b7c078657bbff1d8277ad528ccfb6

Remove freevideodub.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.