home

freeaudioeditor.exe

Web Software

Beijing Qingchuanglianxiang Technology Co Ltd

The application freeaudioeditor.exe, “Web Software Setup ” by Beijing Qingchuanglianxiang Technology Co has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.flashpackageapplications.com and multiple other hosts.
Publisher:
Prog Lite Installer   (signed by Beijing Qingchuanglianxiang Technology Co Ltd)

Product:
Web Software

Description:
Web Software Setup

MD5:
093b5274b8b4e1455ba4bb69d0063afb

SHA-1:
2dc5125803c61de27968ea439dd855db57e91c22

SHA-256:
062161ecefbb0456c427c156304d3b305628f92d4c6fbcd7446f966ecb0d2c3e

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
9/28/2024 8:34:23 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted (variant)
10.12895

K7 AntiVirus
Unwanted-Program
13.212.18474

Reason Heuristics
PUP.InstallCore.Bundler (M)
16.1.21.17

File size:
904 KB (925,696 bytes)

Product version:
5.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\freeaudioeditor.exe

Digital Signature
Signed by:
Beijing Qingchuanglianxiang Technology Co Ltd

Authority:
COMODO CA Limited

Valid from:
9/10/2015 9:00:00 PM

Valid to:
9/10/2016 8:59:59 PM

Subject:
CN=Beijing Qingchuanglianxiang Technology Co Ltd, O=Beijing Qingchuanglianxiang Technology Co Ltd, STREET="1901,Moma Building, No.199 Chaoyangbei Road,", L=Chaoyang, S=BeiJing, PostalCode=100027, C=CN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E5F50EB929935434546FDDE8F49FCB1E

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:2tjvaxVYPchE3nUeRAJv5H7puxtqvVQXldh8:2lMVtAUeaJvxkbs8ldh

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freeaudioeditor.exe has been seen being distributed by the following 13 URLs.

http://www.flashpackageapplications.com/c?x=3H4Q0afPVOgMDgBETLHY77xkID4DDnqutAtv8l0pChc=&c=SO dydWvNxK6JVzI8W8oMXnSTtWTt22Hx3QrHLI4RLaI3uwDdBbFzonU9tT6Sw3s4Baw4zETbp4qKgfCeNp3gLi0 2fcIfW0gVxm7FckH2afgZn FCui7U6q/Oz8zc1W&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.bundlefunpresent.com/c?x=b0ki8XjHdGyJqV6seOFkYMXxjh/mmiAnD2itdStKlgM=&c=Ni7a8sBo5f09TM5mwC4/wO1BUrcdBxkq9Qe ltSOGdM6qOsPKmUrDBLWEabDVM1rNulhAB7FCC2DEDdIEmK9gK40z6FNGHQ4WuFLrwn3utxorbwlcKpyDqPqMrP7C0UO&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.flashpackageapplications.com/c?x=7qifQhEqryH0HUQuTBAbCUYkloVLdI5jxj8qY4p/Hx0=&c=F2mdICz9HwGa83AhbBC74xLVG7De0gr015UKsO7gXLi94tJdKDvMKFEXwTYJrhr89iXgMm1MFxZgDbbt2LR1sQuvD6Z1aTJz5lMPWFeH7E2/GJv1fArtBhIuNPFzgXnD&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentsignchuckle.com/c?x=0WsxISwUi T7Ey62npOd2us2icRR7K4jnrHd9GlTlOk=&c=x3e7K7XJPfeVG3ZsCRmvDm4dn9gYfum6ljxMLurwzyG5kxgjD0Bn4pW14G6jsevfhu0 RrRqfAdbrhwe7uX84YB9M9RzkBTNK 6K1WxDpEiLG9s1qnehjKyiss72lLpM&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentsignchuckle.com/c?x=768RSJLOwO4XpjhE1xeN7mIcpNci 2M3kdyydIxovZM=&c=utuNgCY/HGCpdLSpqZInZsuU0LKWRvOwDgG7tF5FMAZIVPmnUVnGeQRBF751k4MCrEWbBYnxZYS3z4nhARByDzgWn2HLZcZXiWHPnn kDodyt28UnvYJToq4qT5ygf4b&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentsignchuckle.com/c?x=2EcPA6X7Jd13QDlyh6GEGBz5wuP9YM6bzqqdKUUtrpM=&c=hNvpl4Jrwkgj6R8P9TOSqxCUo18txbFUuZnh4QohD78SldIUG71XKeGI8ly9l9mxNbFHWVxxqEUagOutxCrc7FrN5Ob MMS0mqiLg2KY4JQrODyFKSSB51zobfCLdSj0&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentsignchuckle.com/c?x=8c7qRscPGncKPVGBtewzIhGbNVJ7BcClVlqbAha2cCI=&c=X4EtE799O558NKBxdUngDQv3RuVxCI5rKtB0GiVHg3z4bIAxM/MCfAY TME58PDQBrSttIsglpTf D9Ndjiy77sXTf7Qg6rxuVr0s7pPn5mvWN1unTUxjx/zo3929t2c&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.chucklegrabbinaries.com/c?x=G5IqNoXuSV1BSYRbnu2S71t7KN24Noho6bXVqmBiJwQ=&c=yV/ z/3u8dHjYB1QSrKX0a4MUCxbfQ 5phVJ72MJHLHAOWnAalDoGXpCfbexfPvR2iZukHoe4La/0gVyPTxectKkthR LE6y YkKruIrCV9orc1ctCUeeVTmwyo3etUA&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentsignchuckle.com/c?x=JtI/Bv7joLBQdAcd/C2dsXnh/72sT0iKzfySewCeWBw=&c=ovA9kJGVm5XDTqYC5ZXDQQewcNqh/SBMVjPXoPtxrm32xQBKDNIO1UMMBPjaBHxDMqmubcyqhxzKsa2 E34dHyxuAgfxLaggqdz973nsS0dMppPirrvZqIXR/l gSjpX&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.grabfactoryapp.com/c?x=6VpCaOIyYP4ur6Fo5kEvyrHlZ6RGJZzBgjjE7O3aYSs=&c=6jSB0NJynSxLcsoP6DSd9sgUbxqJJBISXmQBUicJZkL0OnLmgZIVbgEsMJGvzfO9F95qQ3RpBdi5G8Qgw4 PMPxOhnUilYbcqXdlVP3sqtdlpPWyYYueKq3aTxxpznoK&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentfuntower.com/c?x=BUeUYh1iiuDDxZV7Gaqqu/xY1Erg2SF7Zk8Luz4x4GI=&c=bFm9dgXpeWwH6A8wNzRc5QWzyx1js2fsMleREi/IAnXg/zaHvo1XHqy0Wf4h33EfzPzqMdN8c gnBWbxMLTNG29E7gvB3efhymOjDVCcIxPENlJ1XHonAAAtRNNSbg4n&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.contentfuntower.com/c?x=KzThWvXanVZjJOJzILiMf2CiNRpXjG1WRlrm7LliDhU=&c=EbK6of6WzQHeQVi30goraCQG5VxuBNd0NQqIr7ppofRWLTZ5EZ3jVtPcfyu NLrTE1RmrOQgSKsnuoTcfQW7buYOpq1Oen19XQlrEO/3 qJt9WUcScA92iFe9KDKrzwY&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

http://www.sendcurrentapp.com/c?x=2txAZ4dwoERno1zmc61CX1XF98 L4mvXpX7qeMyYPOA=&c=utbrhCbCjkG5HMjCo4DTq1G4 /Nk2PZWsiqYJKWgvOsCjW4EghQsYW88KuSLiwjFEqmncBSO0M9JuMyX/n4GFJWdiScsl6NEUG1tlGuleXufNGadfuLrZ6O9Pk0SO2Yk&downloadAs=FreeAudioEditor.exe&fallback_url=http://www.downloadonic.com/free-audio-editor.com/.../FreeAudioEditor_IS.exe

Remove freeaudioeditor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.