home

OpenCandy Inc.

Publisher Information

OpenCandy Inc. is a software publisher located in San Diego, California in the United States*. OpenCandy from SweetLabs is an ad-supported platform that allows publishers to include monetized offers in their software installers. Its advertising software module can be incorporated in a Windows/Nullsoft Installer and when a user installs a program that has the OpenCandy library, there is an option to install additional software that it recommends (based on geolocation). These offers are typically web browser toolbars and search extensions. Thre are 12 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
8/12/2014 6:00:00 PM

Valid to:
8/13/2015 5:59:59 PM

Subject:
CN=OpenCandy Inc., O=OpenCandy Inc., STREET="510 Market St #301", L=San Diego, S=CA, PostalCode=92101, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00c3779eb50f49e5634257cb77974a96d9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

G Data
Win32.Adware.OpenCandy, Win32.Application.OpenCandy
100.00%

ESET NOD32
Win32/OpenCandy (variant)
100.00%

Reason Heuristics
PUP.Installer.OpenCandy.K, PUP.OpenCandy.H
100.00%

Malwarebytes
PUP.Optional.OpenCandy
66.67%

Baidu Antivirus
Adware.Win32.OpenCandy
66.67%

Agnitum Outpost
Riskware.Agent
66.67%

Dr.Web
Adware.OpenCandy.15, Adware.OpenCandy.47
66.67%

Fortinet FortiGate
Riskware/OpenCandy
66.67%

McAfee
Artemis!EAA0B6DB9BE4
33.33%

Trend Micro House Call
Suspicious_GEN.F47V0905
33.33%

9 / 68      (PUP)
ocsetuphlp.dll (Rec Helper by OpenCandy)  (0816f5d6b1d32af702f525dc5f69a1cc)

8 / 68      (PUP)
dlm309e.exe (Installation helper by OpenCandy)  (eaa0b6db9be4ae8283f81a030a512cca)

5 / 68      (PUP)
ocsetuphlp.dll (Rec Helper by OpenCandy)  (8629c91ddd1d1323ae7204d753f8304d)

The certificates below are also signed by OpenCandy Inc..

064F7F3543BCDEFC1576F502AE200E11  (Feb 03, 2014 to Apr 22, 2016)

3D96F95B7280804943B22EAAD87771E6  (Oct 24, 2014 to Oct 25, 2015)

0B88C871F68A9102FD1B743704369247  (Oct 24, 2014 to Oct 25, 2015)

5407D8E1F2D0E6C4E6F068C2480628C9  (Oct 13, 2014 to Oct 14, 2015)

29CE9F5BE708FCC90C4937893D131841  (Oct 13, 2014 to Oct 14, 2015)

0098EBBE629C4556BF484A6F8F34FED191  (Oct 13, 2014 to Oct 14, 2015)

00C78CECD817AA361719203EFEE430C0AF  (Oct 13, 2014 to Oct 13, 2015)

00BB7B40B95093A55585D1C267C0D46EE3  (Oct 12, 2014 to Oct 13, 2015)

00B0CC36BCEFA9A2F21227E1707CED355E  (Aug 13, 2014 to Aug 14, 2015)

79D7802797DB6E08C313832B63BDA95F  (Jun 27, 2014 to Jun 28, 2015)

10 of 12 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

OpenCandy Inc

OpenCandy

Linkury

ReviverSoft LLC

Bonjoy Software

Veristaff.com Inc

Conduit Ltd.

* Note, the details and description above are based on the code signing digital signature issued to OpenCandy Inc. by COMODO CA Limited on August 12, 2014 with the serial number '00c3779eb50f49e5634257cb77974a96d9'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.