home

freeaudioeditor.exe

Cakel

Huaxinwantong Beijing Technology Ltd

The application freeaudioeditor.exe, “Cakel Setup ” by Huaxinwantong Beijing Technology has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.bitssigncurrent.com and multiple other hosts.
Publisher:
Huaxinwantong Beijing Technology Ltd  (signed and verified)

Product:
Cakel

Description:
Cakel Setup

Version:
4.1.4.7

MD5:
43bcbd0305a76ef5ef2b0c1be355d2c0

SHA-1:
03dadee92e31003b1270ac808227d944fe9fb16e

SHA-256:
8df1fc9e391fc90a5558b233a6ce4a2ae435853949a9619d3d0227696e9ed5d0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/23/2024 6:42:50 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Huaxinwa.Installer.Meta (M)
16.4.23.19

File size:
908.9 KB (930,736 bytes)

Product version:
2.3.4

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\freeaudioeditor.exe

Digital Signature
Signed by:
Huaxinwantong Beijing Technology Ltd

Authority:
COMODO CA Limited

Valid from:
3/24/2016 5:00:00 AM

Valid to:
3/25/2017 4:59:59 AM

Subject:
CN=Huaxinwantong Beijing Technology Ltd, O=Huaxinwantong Beijing Technology Ltd, STREET="Dong Balizhuang 54, Building 2", L=BeiJing, S=BeiJing, PostalCode=100025, C=CN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C31292C6449E082B3FBF99E310243E2E

File PE Metadata
Compilation timestamp:
6/20/1992 3:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1+XtyYvnB+gz6IHHb0XTG+lbftaNF0djl2kpVJQk2:1Ittvn36Bq+lbUydVp3Qk2

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9316

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file freeaudioeditor.exe has been seen being distributed by the following 10 URLs.

http://www.bitssigncurrent.com/c?x=GVBIS2ETSm6CMLsLDN/Yj4hKWLTUDhYWgfn5nnOHyiM=&c=WUIbMlxdvPXEN votmkxJGaMpISjJlGGMLOf16s20l5Oc8/zDc5eSsVWDe N8b8pEOYpmd9yBnHfXkKzLIcyghb4DFvgABHLpbE8ZHeA2hSNtGlV4K3j9thNCqngn4u8crCaF5rhRBoBmZYF1JFkejAO7cAVd3lQfBCJaorIJec=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.bitssigncurrent.com/c?x=GXOZAJMTxklrJLhCS JS6yGHSFMXsf4wnwruxN/l9Zc=&c=5qPc9gZozh/qM ltLZAiy02y8CAGxCZ5NVbc0 9Ax9v3Q apP39UjxnJwChiwaX4ocCjpyYXs/TYCHLhKw33LpDM4FuSb1 zv32WUPD94uU3lJBbPo5y2MKxJ HE04hnvWW7ptg6ePUJgdI7PoEYqKafZ7OP90cZGChSUgV7wPU=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.repositoryuniversegift.com/c?x=SuNnRUkgYiNKA6H8PnRUAjfnyg8z74ZsB24F8gKclDg=&c=6Ya8 dZEAAA/V2 rBHEvHQovF/7Nj5ZqkCFtzEnAY3pnNpeYwbFW/uIgAVodnI5J/yMaKWdMKnXM20IlJ1ezpzFKK6ESBBqfHM1nyqv1uiLbuBkwyaf7P7FqjzGJm3fBGNKG74SJqqyvsJffkai439 agkVQe AWhMmPUXpo8yw=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.conecptquickrepository.com/WVl6OTRQVkZSVVdSbUpUSkdia1JPY21STlRrNWlNbWhFUVhwSVZFMWlXVlZSV0VvNVZWY3libVZxZUdSRFpWZ2xNa1pWSlRORUptTTlUMEVsTWtaak0wdHRjbVpRY0RFbE1rSkxRaVV5UWtSek4xaHhSRkIyV1drMGVqUlpPVVJvV1hGeFdXTnFiMlpRVXpGYWNreGhZM3A1TmxrMkpUSkdTbVZ6SlRKR05rTjZSMXBFTm1WRmNXRkRiMDF4YVZGb2IyOTZVa2hQWVVkR1praDRUVlJoZURWalRUaEROMVJoY1RCNFdHSTNRM0l6V1VGQmQzaFpRVE5uUlc5aFRqWkpKVEpDWWtJNFdIcDRURTVSVEU5UU5WQmhNSEZpVDFsa1ZGZEJKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVaeVpXVkJkV1JwYjBWa2FYUnZjaTVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VaRzkzYm14dllXUnZibWxqTG1OdmJTVXlSbVp5WldVdFlYVmthVzh0WldScGRHOXlMbU52YlNVeVJtWnBiR1Z6Wkc5M2JteHZZV1FsTWtaR2NtVmxRWFZrYVc5RlpHbDBiM0pmU1ZNdVpYaGw=

http://www.repositoryuniversegift.com/c?x=39fBGwOF2bXcwjnAhzyaX6LdtFj80Xb4 iZL9oEwSMI=&c=WUrWOFnEM3Y n4/3KoFsDFNP/AGWeEuL6Irh47tnVNUsi4cxBhqxKi6KKBHLfbgp8KAziCNOSMAA95ilGwUSxOwtenuYnrkxqmAJG520HZz3ifh0470D5KCQvYPdVTAm6JNTkjVivzje1iBNsNd24/L9al12IZMssOLGtYANLgs=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.bitssigncurrent.com/c?x=Fvux iCkPh5K90/RycLxMw1iygIQvIM RBOFHvFuS4M=&c=swP eFx0DBMFc8wWQ4LXIaTFjwaoYMIfoyv1A3gH/QrI4bdmJhLK/qf9bV6FliB4J55COu9 H1Pv3Bo/5i0zqvd4V0b0Z9GMeHHyEP7wh0VoRxCLpS/A54Pfcypv0DLYWfHj6uQrpLCpCoI32la1yDhBHnD/Jf8F6NKPak7/OhA=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.repositoryuniversegift.com/c?x=V0ctGrm8dZHUl9jCy83sHr rmMU8tKlQiy8DwPiHfpQ=&c=24TzkueQ9zfordHlRwSIM5OeQsDxxq5fyT5pkuI8aJzCdDOtGDZLL3dEiki3iPl620S08ZwhM6x27veEC1lHWpadIdWseMs9m5wYySKY/omZlfXrBPBQjHSNrfG5Uii9x5BMsm2s9oH9aN22m6OSmESw8 ndZKtn KNbn62rsco=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.repositoryuniversegift.com/c?x=PTcUZxL/w4djEvW7n36jyHBVj8acUB5PSs9WaPX8uiI=&c=Y9ipMx zBQuOzPJDOb5Jjmgo7DOwjcbWO466GUtQtFah3Bxj1ShngXU1rsv6qHpxPqYTWqNX2vvk68qwaqG6i rDFDfY9x3tPx5vMFohA2322zGBymsgWq/pjfYkaitv75H4IjepkrWcVwlyvRHvCaXK GsOALi785v4clf/f o=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.conecptquickrepository.com/c?x=0dStLWLTCanSsfB0YFxd4xkzsjwo9x3dJI3aPqslfu0=&c= ooy krYxGnUXK9L/GAon1iVj7OTWeakjCQ /BnlE5i/SoVoifZYJVbDrukv5lzXXlCkEEzeyncnikDhycOwYZ XMaMN4Re/pXs6Eb83yyMto5gQrQ0kzV8pu5yHpc63xVPwFdXfa/mzmH7RrzPRoQ7PJ yusPB6Q8FnyFtjBoU=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.conecptquickrepository.com/c?x=tORLqVnkc56wXLXpyaXUCAk4bC BbJQHdI6JrS6MPAs=&c=/C7RTKawOzUxa0rYGmKmmfRd5SsaeU0jkAlBYZD7baWXZlZHWa0NH0L5wSsGnBIXMXlhiyi7a64YRmSrBu4Ycaq8WMtOqdC4WVAvTn4Fk0d3cAknB2yzxc2dbgXF/f0fn2BTdGTk5mckTNQzRyHWC2GmqtSCks5YeHjEdmp6Gl4=&e=0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

Remove freeaudioeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.