» freecddvdburner.exe
Overview
Analysis
File Details
Downloads (13)

freecddvdburner.exe

Kakalume

Huaxinwantong Beijing Technology Ltd

The application freecddvdburner.exe, “Kakalume Setup ” by Huaxinwantong Beijing Technology has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from www.taggiftflash.com and multiple other hosts.

File name:

freecddvdburner.exe

Publisher:

Huaxinwantong Beijing Technology Ltd (signed and verified)

Product:

Kakalume

Description:

Kakalume Setup

MD5:

0d7cf41332400018ea7f180700ddc05d

SHA-1:

703f5a0e5aa9a26696cb5cc1e3a82499a3376d93

SHA-256:

84a2996c4241575127a0e4eb0ce2e64bd8a38faacc5c99b89c0a222f7acab860

Scanner detections:

1 / 68

Status:

Potentially unwanted

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:

11/6/2024 9:20:03 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.Huaxinwa.Installer.Meta (M)

16.4.25.19

File size:

920.8 KB (942,856 bytes)

Product version:

5.4

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Common path:

C:\users\{user}\downloads\freecddvdburner.exe

Digital Signature

Signed by:

Huaxinwantong Beijing Technology Ltd

Authority:

COMODO CA Limited

Valid from:

3/24/2016 7:00:00 AM

Valid to:

3/25/2017 6:59:59 AM

Subject:

CN=Huaxinwantong Beijing Technology Ltd, O=Huaxinwantong Beijing Technology Ltd, STREET="Dong Balizhuang 54, Building 2", L=BeiJing, S=BeiJing, PostalCode=100025, C=CN

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00C31292C6449E082B3FBF99E310243E2E

File PE Metadata

Compilation timestamp:

6/20/1992 5:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Z6BlAcWnMHpp1wd/N9DEtfnjmXDkLqBCihLCtF7CRPe6rcVj:Z6fSnM3GFNAMrMihLGF7CRNrch

Entry address:

0xAA98

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 2E, 86, FF, FF, E8, 35, 98, FF, FF, E8, 9C, 9B, FF, FF, E8, B7, 9F, FF, FF, E8, 56, BF, FF, FF, E8, ED, E8, FF, FF, E8, 54, EA, FF, FF, 33, C0, 55, 68, 69, B1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 32, B1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, D0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, C2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, 24, 93, FF, FF, 8D, 55, F0, 33, C0, E8, 66, C5, FF, FF, 8B, 55... 
[+]

Entropy:

7.9383

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

40.5 KB (41,472 bytes)

The file freecddvdburner.exe has been seen being distributed by the following 13 URLs.

http://www.taggiftflash.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

http://www.taggiftflash.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

http://www.taggiftflash.com/c?x=i3KyQSUGAzOCizzSQlzNz2lwn0HPqSkTSlFSBAYlVD0=&c=kmIqJ0Zs u1J77qXDPRTObH3CqLgcV8h8ceSO4eXwPYIQj8AQMGqutKQIuBW6vHS/e9CXZkFmj5qJjhyCnmLeRuSKf/ n/gdh5dRvCf63K/xR1c G/U/09kBYdxvIdNvanrpzcDGgU7JdDIILbPX30AgRAGhLgZL1p4L7/ToMeE=&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=WO3GHte1Z0Qbvq2IY9ZAH4 n32YVteOBzJ RAvTVilE=&c=Iu18ceYkk0lkxOMs2XhtVIre23VVKZ4MF JChyFEogSM6Y4mG07E6SQfHeIvD/qeN/mo7CnFQrpKFC2aRAYCLiTNjX79MCroUqVrDSfWFLKnZlZ8ncb4buUM0P2Pid/sE5tZdmPQ1S/cIRLmgUvhVLVcvCvwINT36glKUjL9OHyz8Md eKJO8ZQ6txYOl3Q&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=OADW6zB5yvk CJgLZW/jBTvHfQMlEYU/fEzfOUvZPzE=&c=gzsgQD IL6lgOvoShzXaOyXITq2bcizz3ClqVlzxaXjhhnpF4f3zyj aGPQ40YbymBw6ja9 DFyVvFiHKtAyKN8RphmCIrMKha4MZRYeJfyHtAgizIWtnB6jmDIItdVPrQOiHxyx/tXU5z3W3bBU1Cci87XP uyAaFbMre1UgTUepUtS1oFTQudywWINv193&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=7D9 HDPZbEf7fb051IHgyDEzfPh oMBMi9EAiuQviiE=&c=eAU3ia/VdjrMJdxyCEaqTkiRn9OTNIQOyDzBuAxwtzyIb1i432dthqI5X3JYMvZGytFLxQukCspHCatNu AWQTaWUjMiXiI4xvqzSaUu5BSuBB8O8kOBAkerYQrZJiga5LA6FYMUMB4tzeJ8aZp5ewPvlc3rGVNykfEqiwz/tWuUvGPAnOGJ GrFhhsyneT2&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=F6V7lZZgU7Wab6u3MAvl2mRcfQQRia8s6mBNzkpjJSI=&c=NTHR6 7i81YbauznsSgR57CxX3h7o1vuBz/gWLV3Xl7hTZi/SxD43Dm3mBRkxN1GV7jZ2TCz1x4NFFwpyeEoWh4qkNyOzdAENqQ7 myaTalP4MuQLfQj01G02BiPMK69htoopeD8Wg9TOjShg6DPZNYwPx9hhH0dCcxBOm8yBnc=&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/WVl6OTRQVzF5VEdOdk1TVXlSbkJzZGtOQlZuQmFTR3dsTWtKMmFYZ3dhMUZ1TVVoV1FuQllaRlpWYUhoSldWZFRkVVZGSlRORUptTTlUVFozWnpaUFZXcGpjM1ZCU0RjNWNHdElUWEZPTkhkcUpUSkNTRGREUVVjM05rbDZUalp1UzJSbk5HcDNjU1V5UWxwTGRrRlpTVEpEVld4TWNXOTBjSHBYVld0MU1uVm9kVFpQYTJKSVJsaHFVWGR5UlhaamRHTTJVbEI0WkVkRFlWbHNjV2R0WVRGbmFIY3pRemh2SlRKR2NESjZVVUZ0VkRkVU5qVnJWSGRGUmtKUWREaE5XVVZYYzFkR1FYSkJiVE5NWlhaT01XdHlUQ1V5UmtFbE0wUWxNMFFtWlQwd0ptUnZkMjVzYjJGa1FYTTlSbkpsWlVORVJGWkVRblZ5Ym1WeUxtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1a2IzZHViRzloWkc5dWFXTXVZMjl0SlRKR1puSmxaV0YxWkdsdmRtbGtaVzl6YjJaMExtTnZiU1V5Um1acGJHVnpaRzkzYm14dllXUWxNa1pHY21WbFEwUkVWa1JDZFhKdVpYSmZTVk11WlhobA==

http://www.taggiftflash.com/c?x=p0aOq8OIJFnHYQZI3ZCehr/tU8XuFbcSm2ghDoLkm7c=&c=ZGbd7gSjVRic33pdM5IlJ87yUPxSqqi5OkbQeR5iX3PrOnyCcLRIlJ 5Vho37yzXTQaXd8n8Sq5cxQM2nmsJPcyB/O2t/p2VSPd 186nkGHDGR2vbvj7Bf0TmQ7ap1Jwz9iGE72fqq2q95QspOYe/iLC5mS5o7Jjk4KElgX7Wm0=&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=OADi6eNMqUBH0tZsYI93nphih1z0rlCbtbQBwHWWUfo=&c=NwmuFNqCbflefqyOW3mz9Lx8/JuFryNJX/MkRxGxsPUo4qbL/zJUAQ4ERwA0LCZCyblxQ X16HuoukynntZHQpcndCqRnvk2Bo0Elq0sIGt3NyOtQYaopbxQAGaSnm05BrGYG0T1 A7 RrC83Zgx6vu80njEaL3Eg4n8Xjb603BLu4Tc3/akcX0Y/vFyBMFy&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=YgSNiD5sv/B6Sj 2qF716V79Yi4Co5ap 7CTWXuOOl4=&c=UaAxk4Waf3K2uesBUQgj1M6Fu7mpUcljWeFMEdmZW8u55FWU1CXepzDLBht33ihaZxRubu1RFTfk4Jhkj iwPxFoWDqZeEbbpuzauYBMdUpJjBAXEGabE2su6fffx8tDe2fgHOw2ouSCP/sAgZp5XzFP8/lxsgyPThWXkl2/5aPPfJrwY06btXX8PYK 36hq&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.taggiftflash.com/c?x=DSxX200B2iDs4wpyKGTlcFs6Pdx/1TJKcW8/YYYMU38=&c=rzulg5WZaVHQTAgssSO5HbNYeLxVO0RaLYWysy04gjM7v/r2RgQpyHM2CwlyRIuac1NTdjs2bfHN6BZFj3pcRqr6 H6dCF1lZp8TJM3GetjhDkl4GiEPvV0T4f1lbR6STlKCEkp7s IvHM2fc5T01 SvMgBdJdksmVrsp93ZbyCSUZnw31m r54yV7nFRrG6&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

http://www.centralvaultapps.com/c?x=GB5zIgTaopkkg5OX6HwTuv9q/aDQS70iqZQ0kMFBjPA=&c=qSmEbDAv1HWy2zxHWQAF//EQbXl9nLRDYPFc2 comMBokpKwYA6EbBP7Lgfd319bSyFAZjIpPp8JYFhnPBx1V/3OXUwwlLkXnFiEGSMzKJNr1naGa5kWS1iiAZx 9JgyoRy5DLaRxDSwNA6HTODJ X 5cU0zDSlAGl/rz2Qdvc=&e=0&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe

Remove freecddvdburner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.