freescreenvideorecorder.exe

DVDVideoSoft

Digital Wave Ltd

The application freescreenvideorecorder.exe by Digital Wave has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.heartvaultdl.com and multiple other hosts.
Publisher:
DVDVideoSoft_DLM  (signed by Digital Wave Ltd)

Product:
DVDVideoSoft

Version:
1.0.5.a0.1_55039

MD5:
f3b2416283eb0f489430d7d98325ef41

SHA-1:
b805524d6692c896cac880b920ffd7008426838c

SHA-256:
4ff80488edddf4b9364374d90e63c6b0881d24e0088921df5c193e21b580fc03

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 11:27:44 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DigitalWave.Bundler.Meta (L)
16.4.6.13

File size:
1015.9 KB (1,040,296 bytes)

Product version:
1.0.5.a0.1_55039

Copyright:
DVDVideoSoft_DLM

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freescreenvideorecorder.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
12/22/2014 7:00:00 PM

Valid to:
12/22/2017 6:59:59 PM

Subject:
CN=Digital Wave Ltd, O=Digital Wave Ltd, L=London, S=London, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1825ED6422D189492317AAD87B5382C5

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:dmX0XFbTc4JFn+Xv5oFP6FFShXaihwwiGnR3rKENtuFRmgQTu:dqcd3nJwFFShXabwiY7KcMFsBTu

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9098

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freescreenvideorecorder.exe has been seen being distributed by the following 36 URLs.

http://www.heartvaultdl.com/c?x=lH2KqgJQEdbbST7IK2Qb99KBG6ZRQyBrGGwxgkp9B3k=&c=xaca1vBP/zUfqvW5Tsa4CihwxyZAuIKOJ3K2Xktmi9 B2jYMSGQGxfuzzArFuVgSwXXesq pWcIPcDJrW9QzYhjUTYnxS T7b adHd0cKQrLI8HHt IaIQRpst0k xxJ&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

http://www.heartvaultdl.com/c?x=vn35/xQU1RsX213Iv84l 7HzdrA9VNjDNlRpuMQFpak=&c=mhiLYGhiPMHUlgqs3f7zsfPw9FW8KYzFg5PLiXhj225lNig96opzRWYY460znZ55eWgNUFy3nvwN/ 9wQQHpEZ 1lDjOdwTQ9/Eu2pMFYj3 wv2Yxiwa/9KbqAAtQUXG&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

http://www.heartvaultdl.com/c?x=hiUE9SUg6HEIsp 4T46nMOUtsH5UQQbBKGUcH/fkd Y=&c=zkGnUWZa7pfPUJafoKVTCrYMNV46cXurCWPAi4J qGTMCU2rWEAn9sAfT/PnR3f6PwE/XE0QOB9vxYnw8Ev5a0WNHvXIM5xUpxO6zSo0IqMkfVyJyMvHOjlrNHKo5mSn&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

temp:FreeScreenVideoRecorder.exe

http://www.vaultsfactorycentral.com/c?x=K3ppubsnYQmNEY9WOckHa5g9LPZ0hw6IDN0xLgGVrf0=&c=gMBUTTe2lVmYTB VY56bvMW wlU47NNXe36bZQl78/OiEKLw3b4aWn8DU4HEp8IDgiD7FHXMplHz4TdEpsZBdwOHRoya01a84HYZqDZtGuUxzsRkW4im08PpFjLcNTp &downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

http://www.heartvaultdl.com/c?x=1MyTinnbXPhdUSHSQB vaDd5mPZQFtUiqX9ybx1Y5Nk=&c=tt/CGgiG n5Tb8itPzu 9P4g6cpaqJ8ks uUotdvQQAMs/BP/h1JE3PP8EanS4HwrOx2vhkSXmmewcLQbzBbHt1mPwXa32Z8ow0osBhGO9QIUCN4D/r4ywjBBjAyeML0&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

http://www.heartvaultdl.com/c?x=4fhbBtQzobjsIEEyz6z0UmPMSRIOS4fSAYOe/ZxysAc=&c=VfVbRMxa9v9S9b17Gfn2dEC6AhZzPfHfjpKmiKisJlfq VXyDMU4raIsOzemZUScOU35r39DI61lanFR0dXNpsEhZkXWkc19N2LII6qqOlUDKA1naKoDAyo0YkCnX xS&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

http://www.vaultsfactorycentral.com/c?x=iEN1wBVh6mkWJrD6/y0pM/keflknQmsJ3XVSIX7fQeg=&c=rBBFwhJBNxfp7EDXVy29CxmH3ghE6 uKivTs8rlUly3RngL1163dLKMsyHbHahY32TzbxtRg 80v3X pX1P/4yfxwhoIyOrrw6cJEUREkPOO/yKMxDNQ0NGoQs9XKLgr&downloadAs=FreeScreenVideoRecorder.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeScreenVideoRecorder.exe

Latest 30 of 36 download URLs

Remove freescreenvideorecorder.exe - Powered by Reason Core Security