freeyoutubetomp3converter_3.12.59.616.exe

Free YouTube to MP3 Converter

Digital Wave Ltd

The application freeyoutubetomp3converter_3.12.59.616.exe, “Free YouTube to MP3 Converter Setup ” by Digital Wave has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from www.pc-magazin.de and multiple other hosts.
Publisher:
DVDVideoSoft Ltd.   (signed by Digital Wave Ltd)

Product:
Free YouTube to MP3 Converter

Description:
Free YouTube to MP3 Converter Setup

Version:
3.12.59.616

MD5:
2911dcb3888e7837df35a5e267872db8

SHA-1:
baf4bdcefe0becd0f27a17e44c3b31d644660df6

SHA-256:
7149da75cf723e24313cb70d31f4dfbd2b01fa83aa467ee85ea01a2d828e4959

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
5/3/2024 10:27:27 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
9.11799

Reason Heuristics
PUP.DigitalWave.Bundler (L)
16.12.4.17

File size:
34.8 MB (36,468,360 bytes)

Product version:
3.12.59.616

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\freeyoutubetomp3converter_3.12.59.616.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
12/23/2014 1:00:00 AM

Valid to:
12/23/2017 12:59:59 AM

Subject:
CN=Digital Wave Ltd, O=Digital Wave Ltd, L=London, S=London, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1825ED6422D189492317AAD87B5382C5

File PE Metadata
Compilation timestamp:
10/13/2013 10:19:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:PyHlmmmSHwTcqgFzEZJX9mBinZ+vFKDTjI2d0zI:4roD2w7X9mBiZ+wnZ0zI

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file freeyoutubetomp3converter_3.12.59.616.exe has been seen being distributed by the following 15 URLs.

http://www.pc-magazin.de/web/.../?token=621dbf61-4976-11e5-91c3-90b11c4b83c4

http://up.bav.baidu.com/?rh=DC63618A0E23567BDE52FA575DC81D58&baidusign=22078925&baidurand=6968

http://downloads.dvdvideosoft.com/.../FreeYouTubeToMP3Converter.exe

http://lb.cdn.m6web.fr/d/c/a/c08c592a0d2d0b11dacb59ac8e2a8139/558c0824/soft/.../free-youtube-to-mp3-converter_3-12-59-616_fr_72916.exe

http://off.dvdvideosoft.net/FreeYouTubeToMP3Converter.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../FreeYouTubeToMP3Converter.exe

http://a.tuviviet.net/v2106xm/2015/7/.../free-youtube-to-mp3-converter-31259616.exe

Remove freeyoutubetomp3converter_3.12.59.616.exe - Powered by Reason Core Security