home

streaming_audio_recorder_plus.exe

Streaming Audio Recorder Plus

SuZhou MorningSun Information Technology LLC

The application streaming_audio_recorder_plus.exe, “Streaming Audio Recorder Plus Setup ” by SuZhou MorningSun Information Technology has been detected as a potentially unwanted program by 10 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
streaming-audio-recorder.org   (signed by SuZhou MorningSun Information Technology LLC)

Product:
Streaming Audio Recorder Plus

Description:
Streaming Audio Recorder Plus Setup

Version:
2.3.0.1

MD5:
17197ca91a4f936ef2966cfe9831b92b

SHA-1:
440f16301af9d33d2a07d5ff04e2b2cb3325c355

SHA-256:
1524f1acc4eca69c3cb469f50b2550af091e859ca252a66fc3635c89387a6519

Scanner detections:
10 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/19/2024 12:38:00 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
OpenCandy
2017.0.2850

Dr.Web
Adware.OpenCandy.4
9.0.1.028

ESET NOD32
Win32/OpenCandy potentially unsafe
10.11576

F-Prot
W32/OpenCandy.A2.gen
v6.4.7.1.166

K7 AntiVirus
Unwanted-Program
13.212.18189

Malwarebytes
PUP.Optional.OpenCandy
v2016.01.28.05

NANO AntiVirus
Riskware.Win32.OpenCandy.dqxwfk
0.30.24.1357

Reason Heuristics
PUP.Bundler.SuZhouMorningSunInformationTechnology.Installer.Meta (M)
16.1.28.17

Trend Micro House Call
TROJ_GEN.R00UH05D715
7.2.28

VIPRE Antivirus
Trojan.Win32.Generic
39950

File size:
3.1 MB (3,281,344 bytes)

Product version:
2.3

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\streaming_audio_recorder_plus.exe

Digital Signature
Signed by:
SuZhou MorningSun Information Technology LLC

Authority:
COMODO CA Limited

Valid from:
12/16/2014 5:00:00 PM

Valid to:
12/17/2019 4:59:59 PM

Subject:
CN=SuZhou MorningSun Information Technology LLC, O=SuZhou MorningSun Information Technology LLC, STREET=16-A305 International Science and Technology Park 5, STREET=328 Xing Hu Road (Suzhou Industrial Park), L=Suzhou, S=Jiangsu, PostalCode=215000, C=CN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4AA69CD8367C1BA3A552A6B6B5767830

File PE Metadata
Compilation timestamp:
7/9/2014 1:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:jkgmcJ68bsWPRU18271hbu/P1r7ffMloXE:jjsz13bWf3U

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9860

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file streaming_audio_recorder_plus.exe has been seen being distributed by the following URL.

http://www.shiningmorning.com/software/.../Streaming_Audio_Recorder_Plus.exe

Remove streaming_audio_recorder_plus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.