home

audioeditor.exe

Softdiv Software Sdn Bhd

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Softdiv Software Sdn Bhd  (signed and verified)

Description:
Dexster Setup

MD5:
fc30ec75e5cfd43a419fcc206959c0f8

SHA-1:
fe7544050589754481c193e925e460fe2334cdc9

SHA-256:
724ffe7408e4732a30ed3af8aac801e477455dfdf9cd2205c1990a00b571cc97

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/7/2024 8:41:16 PM UTC  (today)

File size:
12 MB (12,564,576 bytes)

Copyright:
Copyrights (C) 2001-2016 Softdiv Software Sdn Bhd

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\audioeditor.exe

Digital Signature
Signed by:
Softdiv Software Sdn Bhd

Authority:
COMODO CA Limited

Valid from:
5/9/2016 6:00:00 PM

Valid to:
5/10/2017 5:59:59 PM

Subject:
CN=Softdiv Software Sdn Bhd, O=Softdiv Software Sdn Bhd, STREET="216, Jalan Permai, Taman Bukit Gambier", L=Gelugor, S=Penang, PostalCode=11700, C=MY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00FB76E34BC389BE652FDDCD1CA7C7D2D6

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:tqK8wbIbVVZNUby5wCfZUYjwr3f8nTNf84O4OeE5yQkgGTgDlA8N4Z5ULm0J2gcT:QKmHnUby5wqZ3fTNkjJdTD+8NyULl2/T

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9998

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file audioeditor.exe has been seen being distributed by the following 7 URLs.

http://dw.uptodown.com/dwn/f8NrKfdSO5my6zaymXzsAZVeYiWsyNGxDGd0kD0Yk2biU-3LR9kF78FAy7QBGD8R8Tp_yB2mxL5pthds55D-RKY53JvHi-Xgf8pO338mHLGfSCJG1FjCtaJF15zKMIgY/lGAhr5xNvo0QrEl14OOtc1nVxs75tAj0FFtXdMB2AwdIqdCnG_kzGYgINOVzXYPLBlSELccmWKsYDY5_6VpBWBndiUzYTWGAAvWu5HJQTv6gc5W6U09fMx0C8ZEVyEu2/jcfZURNWlzG6ARPehYjXfddijF-wDu5UZkABQNxM9vN3yzXgrRu3q6Z2OlMG95CjmT1-xk7KkKCOAT8NDcw3u90_CVB53Q1W1PqdR3JnSyKJgA3fKrtYklbHboYbLnAf/.../

http://dw.uptodown.com/dwn/NwlxaBuKCydMbZ9sqscCPFZXgffH273Wnh5hSS7OzdMjGQCxJQN4jBqpYp6pxkvP0nBIffxUBt6AA8w1Hvy1FxumjHbXc-e317SQkDLDs8mW11hBS2pf00b3j_zA2w9j/ZgVwQ_urPfODrkKVIHa3mOIKuBWbKKPGYcJRSZmTJOaMT2qbAJ9b_lxnMGnjuJ4DWm8dlHg_QQAzNBZn1CzoaDV4RCCgAaMuPCUjRD8TdHACoK73F-wpAFmLukeBRzGM/cJYob4-2ypMQMlZN3m52b13gybXnWEMo0T-MOd_1-vVAm85JZqzPIlWSNVca1Y_p7A4NPBKZeOgcx3XRq5eZyM0WOIXGay33n0GgSkq0T0PQqaMPKR53CUCy_MNEJSd6/.../

https://dw.uptodown.com/dwn/rySAK3dbNq9u31VdxL90hMSqAmnm2En3c3b5WD7qH8AXEpiRIrPjDw-bdJCwq9JCpiCzX4TdIiPIUrVi18MzpquRrN2YtwxXhXPIY9VuaeOMfo0-kKwNAXnAzUSttfB7/h5vIMHSNIyJXQ2WLfzwgwZjmqHxOlDmWFLJjtDzPPJuwEMECX7tdJlpY-CgaT4aGkevMEsKAu6lhbPoi7Wi-JvusBGVM6p4fMIhbq7-CDGKsQbF5gy6IfrTD5XOOr0VI/xrZe4HKuMIumxMoCAUH-2P_yXvWdT5SxsXPUe8NN1sqFoQrcMcGffCWVuJUW0jLzD2ZkvcgfoxzlKxSObjlVeisoSve0z72uzpMVofHu3TQy6RF8e7nhMGBTqsQMfaMd/.../

https://dw.uptodown.com/dwn/AUracxiHHV9xVnxrZ0kfMAjwTBrQxeBVOSW799dTSlHqIIqKjPRIlJ9M_oHgM2xqDuylrIRYjpPmsdmekpfuQ8B0B6kSthyA5VX39PDtNXBHYQWD7swr7gf7yOrqApC3/EbZVAUEIvPhC2cIFfYTxC_P_yEkyDwPVtP6px_9rYaGP3sfKKkqqD3k5OeX5_1YyzlibCLSDOLV3_cgVnNqTrIXKzp_ZZYD4Zbj7ZJPbrfQRcSCf0bTJ5qMA6VxDJdvy/_zkLNU86xBMWHIySUwDPhp23CWeISLoYAGOMBGYF2wGb6pxKtDW5-edGhADamJkzMj6c39PnIVjzpyM73wP1Kih_3O8n1zoSA-ZZ-Q7WCvpTyZu7ClrBKxUC3mLYWxVm/.../

http://www.clearuniversecapital.com/c?x=QN7EnKFLme8BBQjgUwgnoPSF/ltw9CoJPJS6dkgvQ3k=&c=iw6gegaCaUJ6EBRm1fMn6oLG4hmYYAxjrNgGaQmPXVzOs1OlVahjmQEVho2EwOyIM7MRUHy3kgICVj jo8h a4R1sAkz3FhkPKTMEDhBptd9Pt5pVUUg8LGRtn5TGYGPyrdR8jWJQeLZTrfnVVjXlG5OIFlr5XC6mkHxeRSAA4c=&e=0&fallback_url=http://.../audioeditor.exe&downloadAs=Dexster-Audio-Editor-36952-dp.exe

https://dw.uptodown.com/dwn/25cuWw8qcfwIGMEkvg0xvTBNhrDLOQ6n8jdzFSVGXu1p-i48ikWTqjQaxQiHM5ao1KuApC1Jl1AWBfkamI6aQmROdAsqT-B3o9kmnZlsOdF046ox8Kk6aT1smt4o3LCU/gP_by4EEZ8ZUj5etK_s-nQTiwcSKQ9XuuC9mU66Qu6tSuFHBFk_A_JQ9ed5ci2cisnJZQ9nsBFBkFyYUBiA8KCCXJIqVhFmGKbnq97MQV6FE3YxvWJ3mnGQdwd-b779r/.../

http://netdna.dexster.net/audioeditor.exe

Scan audioeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.