home

audioconverter.exe

Rich Audio Converter

Radiocom CJSC

The application audioconverter.exe by Radiocom CJSC has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Radiocom  (signed by Radiocom CJSC)

Product:
Rich Audio Converter

Version:
2.4.2.1297

MD5:
a833970685af06e310bcfb27cf6f4013

SHA-1:
8f8764bc7bb028437e112a5376914e1c2e69ad42

SHA-256:
2900cdd8bdf4de66ee9bba737602724de04b105084e68aac44b51c1ca51705d8

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/25/2024 11:38:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Radiocom (M)
16.8.11.20

File size:
1.6 MB (1,681,688 bytes)

Product version:
2.4.2.0

Copyright:
Copyright (C) Radiocom

Original file name:
audioconverter.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\rich media player\data\audioconverter.exe

Digital Signature
Signed by:
Radiocom CJSC

Authority:
VeriSign, Inc.

Valid from:
1/17/2014 7:00:00 AM

Valid to:
2/17/2015 6:59:59 AM

Subject:
CN=Radiocom CJSC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Radiocom CJSC, L=Kiev, S=Kiev, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
531E40729E737E46C1F9519C589E8681

File PE Metadata
Compilation timestamp:
7/30/2014 4:15:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:P5zUO8hK9276Gnhpq6gFdBLwPojWLnPGqKei82SPT:P5Ujc9nGnhp3g9LHmPlZ2SPT

Entry address:
0x7947F

Entry point:
B8, EC, 39, 8E, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 4E, 04, C6, 41, 7E, 3F, 40, 6F, EC, 67, E1, C3, BE, 0F, 69, F4, 1B, 8F, C9, 76, 1C, 28, AC, 0E, 61, FF, 97, C1, 54, 5C, 36, C6, AF, 9B, DC, 3B, A9, 7C, 7B, 73, CF, B6, ED, 44, C7, 67, AC, 4D, 86, F4, 08, 1B, 6B, 24, F1, B5, 7B, E9, E8, 6A, 93, CD, CE, 8D, 30, E5, 42, C1, 60, 03, 7B, 6D, D5, C4, D5, 7C, A7, 0A, E6, D1, BD, 44, D3, C9, 61, 9C, 83, 0B, 72, E0, 2D, FF, 5B...
 
[+]

Entropy:
7.8571

Packer / compiler:
PECompact v2

Code size:
560.5 KB (573,952 bytes)

Remove audioconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.