CDex-win32-1.70-b4-2009.exe

CDex

Georgy Berdyshev

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from cfile10.uf.tistory.com and multiple other hosts.
Publisher:
Georgy Berdyshev

Product:
CDex

Description:
CDex - Open Source Digital Audio CD Extractor

Version:
1.70.4.2009

MD5:
9207e1052aec9258ab35b40c65e5ff52

SHA-1:
8901c62ae45946ca52c4f5afe71c1188cc9e5617

SHA-256:
c8dc9861397904b1024a9db5d8eff667de1c5f5ad131f08ba037da97a2795290

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 1:06:31 AM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Dropper!6.3CE
23.00.65.131223

File size:
8.3 MB (8,697,544 bytes)

Product version:
1.70.4.2009

Copyright:
© Georgy Berdyshev

Original file name:
CDex-win32-1.70-b4-2009.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\cdex-win32-1.70-b4-2009.exe

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:1YJJQ22xGjAQWD2lqzxMrKH5M7sxOSZdYJvNJPbHYlrmfAfbDA:2JXLjA+oMw5MgQJ/PZoTE

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file CDex-win32-1.70-b4-2009.exe has been discovered within the following programs.

Publisher's description - “CDex can extract the data directly (digital) from an Audio CD, which is generally called a CD Ripper or a CDDA utility. The resulting audio file can be a plain WAV file (useful for making compilation audio CDs) or the ripped audio data can be compressed using an audio encoder.”
cdexos.sourceforge.net
About 1% of users remove it
MyHarmony  by Logitech Inc.
3% remove it
 
Powered by Should I Remove It?

The file CDex-win32-1.70-b4-2009.exe has been seen being distributed by the following 50 URLs.

http://cfile10.uf.tistory.com/.../217B224F57D6D7C8099707

http://www.cdex.fr/fichier/60696bde7e6a6c84d207eb815d18c9e6/585c174b/.../CDex_1.7_Beta_4_196.exe

http://s578.chomikuj.pl/File.aspx?e=6wMrB0PKVT5hgY4jzgbJnAM3cGGXJkoobj9aY1UDG8UB3nV7oyUSuYK66mXOvgRUo9vFcUJheffpXkWSMiDX2LyzV9A7y7WI-c0_cJgf4rApEX8fN5k1bQYtpWHP7jcnrI6vIBxHwZ3aKE4flXj1x6h3fI7mNMFX0nqy8wJH9jM&pv=2

http://download.slunecnice.cz/slunecnice/3aa1bf6cc233c37da3b03a404c514c64/4f6838ca/win/.../CDex-win32-1.70-b4-2009.exe

http://fs11.filehippo.com/7749/.../CDex-win32-1.70-b4-2009.exe

http://voxel.dl.sourceforge.net/project/cdexos/cdexos/.../CDex-win32-1.70-b4-2009.exe

http://letoltes.szoftverbazis.hu/JCP-YwthcRhoLIuNW8CoPQ/1473696266/.../CDex-win32-1.70-b4-2009.exe

http://global-shared-files-l3.softonic.com/890/1c6/.../file?nvb=20150114052342&nva=20150114172442&token=0ff25cbcb6df594c16deb&SD_used=0&channel=WEB&fdh=no&id_file=9065&instance=softonic_es&type=PROGRAM&filename=CDex-win32-1.70-b4-2009.exe

http://s578.chomikuj.pl/File.aspx?e=6wMrB0PKVT5hgY4jzgbJnN0qgLLEfJT8kjZj3LNm336hhWoryMtgjF76iDhanIRxgq9ar4Md4jjqVytHKvg5QuPbv4w22t1MkTxW3Bb1T7gJg5WjWityTFZw0wTQrbrSJC3GDSi8oaotRQmDe9INGHr-74JdXsRbm4l9Cwl96Ak&pv=2

http://darmoweprogramy.pl/.../CDex-win32-1.70-b4-2009.exe

http://windows.indir.com/kaydet.php?x=TWpFd1FFQkFJU0VoTGtGemJpczBaaVZ0TlUwPXx8fDdmNGM5ZWU1YjgxMjIyYzQ3ODI4OTVjMGZlNjE5MWY4&m=1

http://www.itexpert.mn/Files/.../CDex-win32-1.70-b4-20090.exe

http://puzzle.dl.sourceforge.net/project/cdexos/cdexos/.../CDex-win32-1.70-b4-2009.exe

http://sunet.dl.sourceforge.net/project/cdexos/cdexos/.../CDex-win32-1.70-b4-2009.exe

http://letoltes.szoftverbazis.hu/Q4hgLhXYn0uLjyZ8E4sJZA/1439035946/.../CDex-win32-1.70-b4-2009.exe

Latest 30 of 66 download URLs

Scan CDex-win32-1.70-b4-2009.exe - Powered by Reason Core Security