home

freevideotojpgconverter.exe

DVDVideoSoft

Digital Wave Ltd

The application freevideotojpgconverter.exe by Digital Wave has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.vaultsfactorycentral.com and multiple other hosts.
Publisher:
DVDVideoSoft_DLM  (signed by Digital Wave Ltd)

Product:
DVDVideoSoft

Version:
1.0.5.a0.1_55039

MD5:
c06a129e9a2c59d9f9f447f56a8dfafd

SHA-1:
f737d2180d19f85f57f954b2420f24e217be5f4b

SHA-256:
93d7258782a11050a19fd57e714e36e6d159cc59d6e9166bc330e6ec4fcf1c2d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 11:36:06 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DigitalWave.Bundler.Meta (L)
16.4.6.21

File size:
1015.9 KB (1,040,296 bytes)

Product version:
1.0.5.a0.1_55039

Copyright:
DVDVideoSoft_DLM

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freevideotojpgconverter.exe

Digital Signature
Signed by:
Digital Wave Ltd

Authority:
Symantec Corporation

Valid from:
12/23/2014 2:00:00 AM

Valid to:
12/23/2017 1:59:59 AM

Subject:
CN=Digital Wave Ltd, O=Digital Wave Ltd, L=London, S=London, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1825ED6422D189492317AAD87B5382C5

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:nmX0XFbTc4JFn+Xv5oFP6FFShXaihwwiGnR3rKENtuFRmgQTu:nqcd3nJwFFShXabwiY7KcMFsBTu

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9098

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freevideotojpgconverter.exe has been seen being distributed by the following 7 URLs.

http://www.vaultsfactorycentral.com/c?x=6YXDJMFvosVcs6fUB U0dvZFEW0Ea R1Sz0JL8XAIQE=&c=RAbaSRNBIpftdD9ivt1q5LeIW/69rFfNsPZAizmsB7oktkWiRqt80kJPt23640AvYLNHC84uBOJVi/CxijzZyrAVewbSvsF7tbuMYupUL HHZDUkb7BbaoA0PddZMOs4&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.vaultsfactorycentral.com/c?x=L1nP51ZkU0tMUsQ5Klw57fctyq4KBEIQVJiEddMZv8s=&c=2ETAsZoMvrsU2gQfdqS/k99J2TKBaUHgS9WnoFS6cf IQ0rtgyFy01/qqf7JFw8uBuj kKlKXDbDCg4yt vYI5HqBK21b5dKU75vKlDeOFrenEr2fWkVPgJvbrbPuLBf&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.heartvaultdl.com/c?x=vyWKHF3CAgSpU9mQzM8zpOYWj4wcektZrCyv/cgDxA0=&c=XVZ0liYqjGdSDFozVGy9JIw sqeicWgAUfthRuqZBgV1qTaw9cBl2LTGv9ymfpodikvBnZVB/SzMCyCFaUzDviC0SUx8EPM4en0PFYABIYhIUu v/7OacNGXLVKqpcGw&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.vaultsfactorycentral.com/c?x=iiDtRZcmLVEacbjVAIrpSV42utKTesSinILrlzyFMtE=&c=8aG MZqrxtYZViYTB1qF24Psx0QBotD8UCWErvmqb6RP41P8qeHiRsjwIf6BGEohVDOGWndcNlW/UWz3Idq8f5sRR1I5/BDwzxsN6oK7CPZ DgKzTcc5WT4mke4IcOr6&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.heartvaultdl.com/c?x= bYOLnQifgUoFao7UlRBIxtM8AWePAIzh gKjhIpb6E=&c=iwt1aQZuOh ntFiHDu7hqocQAb3gKjMTe 3sFbXT5c1uaZ0UVKwn0LdYc4UpvYaBLxhR4pRPAFfOPQBgqbwxgWdvSkxK3k7cKYBwf2HILfLjRdpHwkyrGNmmfKLLLM5F&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.heartvaultdl.com/c?x=eJOVP7L6ejfpGV9s Fo2TDhsnkxOPb4C36ph1UCvhjU=&c=8j xg3LH4inPEui B0T6CwrDswyJGQWkONKi7GLAyc98K3bU62SptFWDvW2JuJAX3ZCPJNUAGJOh8RuZXghyMo2ryymsgbcBLS NHMApChnD9Ro8vKNFFITTNEwQ5v9Y&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

http://www.heartvaultdl.com/c?x=jpHBikLr8L6ADzY6MfOzj/w6FH2pFhXsN1pGltsB444=&c=AovPUlT0WUntZD1BWoxv6Yt5IqMHXjnz1UoJIYX5CDC9ZIPQD2ytZ7OTcNzjCpMhVBWjF87zlC2DqyX5mZhFKOsDChgIJ6KL89nmOhFWQgC/s1ydeEwqbgZKhnYv4GWa&downloadAs=FreeVideoToJPGConverter.exe&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoToJPGConverter.exe

Remove freevideotojpgconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.