» freemakevideodownloadersetup.exe
Overview
Analysis
File Details
Downloads (30)

freemakevideodownloadersetup.exe

Freemake Video Downloader

Ellora Assets Corporation

The application freemakevideodownloadersetup.exe, “Freemake Video Downloader Setup ” by Ellora Assets has been detected as a potentially unwanted program by 15 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from localhost and multiple other hosts.

File name:

Publisher:

Ellora Assets Corporation (signed by Ellora Assets Corporation)

Product:

Freemake Video Downloader

Description:

Freemake Video Downloader Setup

Version:

3.8.0.7

MD5:

5aa06e1f8819c4f25f3cf418e6daa77b

SHA-1:

2b3aa743f45ecf1ae8517c9611cc7fd04e901853

SHA-256:

556dfc2ebf189dddc295f4983306778c894412fa5092070b82cffd60825e148a

Scanner detections:

15 / 68

Status:

Potentially unwanted

Explanation:

Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:

11/23/2024 2:20:39 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Riskware.Agent

7.1.1

Avira AntiVirus

PUA/OpenCandy.Gen

8.3.2.4

AVG

Generic

2017.0.2835

Baidu Antivirus

Adware.Win32.OpenCandy

4.0.3.16212

Clam AntiVirus

Win.Adware.Agent-7758

0.98/21411

Dr.Web

Adware.Toolbar.665, Adware.Toolbar.276

9.0.1.05190

ESET NOD32

Win32/OpenCandy.A potentially unsafe application

8.0.319.0

Fortinet FortiGate

Riskware/OpenCandy

2/12/2016

G Data

Win32.Application.OpenCandy

16.2.25

McAfee

Artemis!13AEFD05072F

5600.6491

NANO AntiVirus

Riskware.Win32.OpenCandy.dzfvgw

1.0.14.5317

Reason Heuristics

PUP.OpenCandy.Installer (L)

16.3.11.20

SUPERAntiSpyware

PUP.OpenCandy/Variant

9328

Trend Micro House Call

Suspicious_GEN.F47V1203

7.2.43

VIPRE Antivirus

Opencandy

46052

File size:

1.3 MB (1,344,752 bytes)

Product version:

3.8.0

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\freemakevideodownloadersetup.exe

Digital Signature

Signed by:

Ellora Assets Corporation

Authority:

GlobalSign nv-sa

Valid from:

8/4/2014 1:17:21 PM

Valid to:

8/4/2016 1:17:21 PM

Subject:

CN=Ellora Assets Corporation, O=Ellora Assets Corporation, L=Victoria, S=Mahe, C=SC

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11214EB01B5193F230A9E2B002CE2A4C1E78

File PE Metadata

Compilation timestamp:

10/13/2013 10:19:32 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:KxG0+Yta3Wc0nI6vq5b+Y+fZbcIJcIv1l0oBa:vWtg0nIecOcItqea

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file freemakevideodownloadersetup.exe has been seen being distributed by the following 30 URLs.

http://localhost:37848/continue?TiCredToken=12009&Source=WTP&URL=http://download.freemake.net/.../FreemakeVideoDownloaderSetup.exe

https://docs.google.com/uc?authuser=0&id=0B-5HcR-vshYrM1ptMFktLUszWXM&export=download

&onid=2071&oid=3001-2071_4-75218130&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/dl-managers&topicbrcrm=&pid=14500065&mfgid=10098061&merid=10098061&ctype=dm&cval=NONE&devicetype=desktop&pguid=2e9417b1292feedfcd42dacc&viewguid=cZlCWx6OZ8T-GC6JrrUorpyxyVeCZ5z2K37z&destUrl=http://files.downloadnow.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

https://dw.uptodown.com/dwn/3ozvt9J5P38O2zysxnyRIXWmB4xLjf6b_Ts1Nn2qOLtlU4tQPmMx38ryvxnkCPqRhOYuL1FsGaCO-8_xj3v_qmUrnJgrRqoRn9yRznNZeeZvWc_BgGTdTwEHIJjDara-/xLBvdf9dTwsczhznumP3FsyaNxOSWXn_uhrAru7i4-0S7PUqWGpuNO_hhY8tlLTUEs0lOy_8sIUsHxocsrof3YtBnVeFNtU-TC2QMcdjzLawPCOOT9WdqnQvR3rZttAs/py_ngEs1OS4raM8lJWhQX3LaW0JJusUtIoa908BXKmFGbTkZRfLXQNftc8c_RIkMWva64uquXzCE8RuxDZERxsFkqddZmh4TJeXCXV2SLZK1sFofCzhAcUv7KoCmsAnc/.../

http://software-files-a.cnet.com/s/software/13/81/25/.../FreemakeVideoDownloaderSetup.exe

&onid=2071&oid=3001-2071_4-75218130&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/dl-managers&topicbrcrm=&pid=14500065&mfgid=10098061&merid=10098061&ctype=dm&cval=NONE&devicetype=desktop&pguid=0c0d1a6756b795c1da4843a7&viewguid=ddXS1zVM0@kOpinIvvoSXR1U386EoqJ7YF2o&destUrl=http://files.downloadnow.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

http://192.168.101.11:1234/mnt/extSdCard/????? ???????/.../FreemakeVideoDownloaderSetup.exe

http://download.dabang.pk:81/Softwares/.../FreemakeVideoDownloaderSetup.exe

http://dl.cdn.chip.de/downloads/.../FreemakeVideoDownloaderSetup3808.exe

https://dw.uptodown.com/dwn/EytrRSqOk0Axgbtvfv0Eg8ARh9nC0ZVVmCuxBNu5zbXe7miE-WaUmudGfu0D7ngB91OZZXD5wa5lNMJ3c6UdKIqxRyoyf18-hZld2jAsa5Yz6sXyHOmgW0R-0YF8k52f/gYCeu7vY-JFzIHJwPBYZjQ3_SZIqy_5wak5FRp-rhZKT95cMp8L4N9uMfXd1esss2hrfxuuFhCrYqoPifI-jCuT-jb_lB6xVDWlSPAhU7dbpK4SVLJcxyT2o4XoUgyiw/QW0Yz18Net_zHsPCcAusa-G9eNtJxHpOK2Cw-spQv8EI7kyGLHVumBNaQajen22pBmyuWQrTwGmDLpcd-hzzju2jck_UyZKJ6gPGNUXsWtfo9o99pT78vgEbmJn18wHG/.../

http://dw.uptodown.com/dwn/U3e7Ld42ouXedh6cJfP4HhN3TRn6MokHQ990m1aRL5czVzp1KCf-AHqopF0MjZY4fSnmoE3D6XuurJEYa8cHmENFXjyBjn1QEip1-v-aQiz45-KOil0zuYnqJTEnv-SR/8FIq4oyMw5dIOuSMKb0TlT7X9ZeKFGWuF3j1uuWjKOt41homnwwiQ1WlPBfyuCuzRxQeu7D28XT-UCrDxm1Ud74nzvo00y-UCiUxd-IhfXb_KlR9i3sCLYWPsgKHVTmV/oNG538oLJglW7SFHGjWXdMeVg20IyEz-iNHKO9ezhCPFOQHmfEj6-45Y9ZmyGQjVlOj0fUSInCBu4k8pxI6IVeoeHzrVwqASQWRgGILcsM03T8In7OI4zvFSWPr9ECHH/.../

http://dl3.vessoft.com/files2/f/freemakevd_windows/3.7.5.1/.../FreemakeVideoDownloaderSetup.exe

&onid=2071&oid=3001-2071_4-75218130&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/dl-managers&topicbrcrm=&pid=14500065&mfgid=10098061&merid=10098061&ctype=dm&cval=NONE&devicetype=desktop&pguid=9e9277b1e130f93f20bb4a3c&viewguid=b5FbXnCzv42Uz-YLhtprABjF1b7CuNU2Fimi&destUrl=http://files.downloadnow.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

http://dw.uptodown.com/dwn/ytPpiLL0vslcJABbMNaFRvGfMzzByAro-J4bFKMxfzc_27gWF43vHMbRBKa4izOhrJ6rDATK60GkW6fdJKAa7Mo2BkSyc2UpqGqwf2Oj8j1hxwXtKXJdWIWn5hfGAerS/Pf9m0HYPZkZvEnsKVaaTWLcv21aGeg9yDwbyaA0hrOVlY72Wy9c4acfjwhaBADm1_Pw1ZTPebcl7imY5YLn5WllEPPxfmnxQscaXzEEnxE2Y4VAhbf_byetu6GyjG2rC/A1cYjNUz1ERbaBQDQvNgOdrHnSQ5oUtBctcRQru0iqrXcBPRWLA0Zk6pNA1Bqo13w78c4PCPpOzNkUnqrV7gTeZGJL-A2Wo-tb9sWi-ZKC8xOVZ49saupEChUumoWHS3/.../

http://dw.uptodown.com/dwn/KvGs9mhpzxAppfhd3ykuR2Et5_kUSNC1ZL36mEsljOq7R2tMZwIG15F4ADrAJjMNR2aXx_Vm2ZSmvMpl98MmE8zBcyBnMDPL-RdB3N5XAmkpjpmUd0rKZ0QCyOgOw25q/ufte9OatqimOZy7ZD2eR6OW53Gf-LhipwvlI2mnUcGffDiA_nLhhXhUElhppncy3-NKPRV6zNEQ_0Yirh2QYtlf8px8ByWX_c9uG9_5g4HYncBSPR1q7Jt5Rq2MBjEUw/mCdpbvuzSNkfQ_tX2ak7cMZaIojelgKr3nXGvL4DjU0_UwO0Ft_sUluGSvLieL6_WY20tr5EZ0nq1L7hckyiRbEkrjRrH9QCnFLMJABkcIZcgvmaHdvhPQg0bVyj_P94/.../

&onid=2071&oid=3001-2071_4-75218130&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/dl-managers&topicbrcrm=&pid=14500065&mfgid=10098061&merid=10098061&ctype=dm&cval=NONE&devicetype=desktop&pguid=85dd95fffa2958ba6190c36e&viewguid=bYC7Q2NQpv5vkWyCma4HlPK@akDw8rDgSFv2&destUrl=http://files.downloadnow.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

https://dw1.uptodown.com/dwn/hp2TtNem491W7wrabQVO3cNdXIhOgOnqT2_ogjf8AJSEADkSQVarrP0nsI56oXZVBt6LGtjONCK-IeOpFRW128s_2ZlSlHOzbED6VVXgyUGfNSzXaDyduhCte_00bcGU/2kkAVgMVX1EoZwQ_VJnFBCAEdoqE506eSSFDtmAjd166YFJOT3XiZXKQpNBfBaeN20_uSS4P_B2BayREuct5ll30lL3oZbIJq9Hteywap7Aww-DD6d57purFuzCay_zJ/B7QiguOmlCu1yW5kRKh7-E8GJMmJQE3dJmBV2b4ESgpUUmZjT7O2WGkKBM1j_71WOHwo0uUriamLqvPiWyKmYRaEnTaNzdRb8Mi4U56xZ38wI47EBInHyfOd7PLAOHUs/.../freemake-video-downloader3-8-0-7.exe

http://dw.uptodown.com/dwn/PiYcq0oOO-xVR0zzC8UYTD6lK-Rf43NvWFTsqzV7Eb_DMKVyEaaQvgg2nK1_ep8AbH5anBOw21G-5bPGhJrwRfvPN_xcwua0ESegy4uoNyYqqjmbPQdmfxd-gO8lLDJR/GKv24y_BqUjeFjAdgOiyfEEOZZrjcv25pMEdy1iCspiAFYmybACm1lvC598u-4Tr8O7_iCGbvSbwh1LHnEc_2Pm3ak-HQxZbWPUhK-S0p1Q6DPaquUSCBuKBmy8DmmjR/tzXuNC9DhU2Zu8oB1ZMa6UQRJ1CsoRRo7uP0Qc9gP9pe2r4BqnunZNZxsZVayP0T82767BAlERFlipPmMtXuG4DfWv6l7ILilneZqhtXewbRKUbxQmMrlNEkwfOf0ZJM/.../

http://dw.uptodown.com/dwn/a8n9HDKzPXL9sQedDBxIcGtiXaBTcgMzw5T1jAGUueXUsGXpnGlkPZEPJkYlflvFZKlsaAZEb1lqPURLxGvcF_C39Meuocs4d972h2OQr3lzwAjkKADkJ3m2CqSwu8I5/jpXNddKGwa09pySerFgOQeZuk9VnAPsoa7djb06gv4Tel9N4pTcyfWxYNokJit3XGVqlpxTaXwaJoso4thyO6A325EqnOpFTd0rXXceONrFpXxBy-5EWG1DeN1-JbmGr/d4-F-JQXNKuUVAzEN_3qivlUz_Wj0sVgz9bZcQZQKNlQHiqhgkeJy1hiNK_qPwZgIDf3tCkvDbbz5ie8CK1di8zhlLQZcaWyCnnmU0FRm1mTPqLFLKhqLCl6CZoZDkgo/.../

temp:FreemakeVideoDownloaderSetup.exe

http://dw.uptodown.com/dwn/aeA5FKVob6OAHNNyXayRq3sLCcXn37xv6E1a0kWM4bvVk0NgjB4VINa45EFsFaF7z_eTh7VxQ5Cg-7et5fgrGLDPwk1Jek5SZllSGRreoIPsl8fUv7uYqDNyq4MRt7_l/e296dq_j64bhitzejijQZHSzsy1tZRbdXOpEtwPj_09BXY4MxiDCEx7exS7LXcsLPxYHxVJiQxCVmxNDZ1tPLcalTKW4U_gF8cPm4sdlUf5npee6eN1FpuZRfU4V9xWV/hkoONDi7HSmtZ-2qTE7eE4-fCo-zmX-sJ8wIiZ3eLmzE0hheZ-aTurremGdBdr_YtJJw7mdzDpL70mlFFjeGTkLBzsaAWy6I9u_F0kCGXv1rMC1ATuzzT0lm-SaZmkdR/.../

http://files.downloadnow-1.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

http://up.bav.baidu.com/?rh=E9C1A740F40643F50D06FDC4AB94F4B2&baidusign=21835833&baidurand=4769

http://download.freemake.com/VideoDownloader/Online/.../FreemakeVideoDownloaderSetup.exe

http://dl3.vessoft.com/files2/f/freemakevd_windows/3.8.0.7/.../FreemakeVideoDownloaderSetup.exe

http://files.downloadnow.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

http://www.freemake.com/download?id=FreemakeVideoDownloader.exe

http://software-files-a.cnet.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

&onid=2071&oid=3001-2071_4-75218130&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=internet/dl-managers&topicbrcrm=&pid=14500065&mfgid=10098061&merid=10098061&ctype=dm&cval=SPIGOTWIN&devicetype=desktop&pguid=afd789f5467bc3f18384a01e&viewguid=bBdzPGC9unh8jCquOAoPv@Y6ViGEL5g6zclf&destUrl=http://software-files-a.cnet.com/s/software/14/50/00/.../FreemakeVideoDownloaderSetup.exe

http://download.freemake.net/.../FreemakeVideoDownloaderSetup.exe

Latest 30 of 30 download URLs

Remove freemakevideodownloadersetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.