» cdbxp_setup_4.5.4.5306.exe
Overview
Analysis
File Details
Programs (1)
Downloads (40)

cdbxp_setup_4.5.4.5306.exe

CDBurnerXP

Canneverbe Limited

The application cdbxp_setup_4.5.4.5306.exe by Canneverbe Limited has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a setup program which is used to install the application. This file is typically installed with the program Toolwiz Time Freeze 2014 by ToolWiz. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.

File name:

Publisher:

Canneverbe Limited (signed by Canneverbe Limited)

Product:

CDBurnerXP

Version:

4.5.4.5306

MD5:

a47a07b4e6cbcb214ecc87d5683dc29c

SHA-1:

b0ac2ea9466513be6e870cab341d25c5e2fde114

SHA-256:

2b664b9f0a0d4261f803bfcde909091ec5e8484e05474e18c79538fa0b662212

Scanner detections:

3 / 68

Status:

Potentially unwanted

Explanation:

Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:

12/25/2024 12:16:12 PM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

Adware.OpenCandy.39

9.0.1.0356

ESET NOD32

Win32/OpenCandy (variant)

8.10912

Reason Heuristics

PUP.OpenCandy.Installer (L)

16.12.2.10

File size:

5.4 MB (5,641,056 bytes)

Product version:

4.5.4.5306

2001-2014 Canneverbe Limited

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\cdbxp_setup_4.5.4.5306.exe

Digital Signature

Signed by:

Canneverbe Limited

Authority:

DigiCert Inc

Valid from:

3/4/2013 7:00:00 PM

Valid to:

6/8/2016 8:00:00 AM

Subject:

CN=Canneverbe Limited, O=Canneverbe Limited, L=Goch, C=DE

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0E73EAE02E53D77688E0C0F18F0F1AAF

File PE Metadata

Compilation timestamp:

7/9/2014 3:58:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:fPVsRbu3G6aRXFSI1dfBjsyhhLhoAmqfvv9eVXTqm8KMDBxImHt:fPVEu3JatFzV7LGABfajqm8KMbImN

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Entropy:

7.9010

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file cdbxp_setup_4.5.4.5306.exe has been discovered within the following program.

Toolwiz Time Freeze 2014 by ToolWiz

www.Toolwiz.com

About 1% of users remove it

The file cdbxp_setup_4.5.4.5306.exe has been seen being distributed by the following 40 URLs.

http://ftp-stahuj.centrum.cz/dl/638e388380758db6a1c55fc435b42171/54dcfe6c/stahuj/download/software/secured/c/cdburnerxp-pro/4545306/.../cdbxp_setup_4.5.4.5306.exe

http://www.filepuma.com/file/1423567441c7782/cdburnerxp_4.5.4.5306/.../0/

http://ec.ccm2.net/ccm.net/download/.../cdbxp_setup_4.5.4.5306.exe

http://storage.tahaj.sme.sk/CDBurnerXP.v4.5.4.5306.exe

http://www.filepuma.com/file/1426952922c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.szoftver-zona.hu/letoltes/cd_dvd/iro_program/.../cdburnerxp

http://i.download.idg.pl/fannef/d8ac3121f27b41069ddae67bf36bac80/556dd4da//vol2/w95/cd_dvd/.../cdbxp_setup_4.5.4.5306.exe

http://www.filepuma.com/file/1430155854c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.tamindir.com/indir/MjAxNS0wNC0yMyAwMTo0MDoxMg==/cdburnerxp/.../4.5.4.5306

http://123.briian.com/forum.php?mod=attachment&aid=Njk3MnxjNTRmM2VjMnwxNDQ3MDc0Njk4fDB8MjE4

http://softvisia.com/request.php?mirror.840.13

http://ftp-stahuj.centrum.cz/dl/bc45336f6561a6a80f978367327bc645/556b27c3/stahuj/download/software/secured/c/cdburnerxp-pro/4545306/.../cdbxp_setup_4.5.4.5306.exe

https://download.cdburnerxp.se/cdbxp_setup_4.5.4.5306.exe

http://i.download.idg.pl/fannef/d21402eb9690cb570db7c66fb6f512cc/55acab99//vol2/w95/cd_dvd/.../cdbxp_setup_4.5.4.5306.exe

http://www.darmoweprogramy.org/download-file/.../

http://www.filepuma.com/file/1428545317c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.nonags.com/.../dfp.asp

http://gsf-cf.softonic.com/b0a/c2e/.../cdbxp_setup_4-5-4-5306.exe

http://www.filepuma.com/file/1431957043c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.nonags.com/plus-get/d.asp?id=/.../&fn=cdbxp_setup_4.5.4.5306.exe

http://www.pcadvisor.co.uk/downloads/221/cdburnerxp-4545306/.../

http://www.cdburnerxp.se/downloadsetup.php

http://software-files-a.cnet.com/s/software/14/01/37/.../cdbxp_setup_4.5.4.5306.exe

http://www.filepuma.com/down/1423289150c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.filepuma.com/down/1421775485c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.filepuma.com/file/1421775485c7782/cdburnerxp_4.5.4.5306/.../0/

http://down.filepuma.com/files/cd-burners/.../CDBurnerXP_v4.5.4.5306.exe

http://www.filepuma.com/down/1419516985c7782/cdburnerxp_4.5.4.5306/.../0/

http://www.filepuma.com/file/1419516985c7782/cdburnerxp_4.5.4.5306/.../0/

http://download.cdburnerxp.se//cdbxp_setup_4.5.4.5306.exe

Latest 30 of 40 download URLs

Remove cdbxp_setup_4.5.4.5306.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.