home

ocenaudio.exe

ocenaudio

UFSC

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ocenaudio Team  (signed by UFSC)

Product:
ocenaudio

Description:
ocenaudio Installer

Version:
2.0.6.6210

MD5:
81291af4dfdb27fcbdb6db42bf24f740

SHA-1:
1de90fb46474fcb3b3a6c09b33a9fa94c6787633

SHA-256:
6353db366cf1048322228c49bfc9e6a7afd70f9766b0513d27aa1322974ff4ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:51:33 AM UTC  (today)

File size:
15.8 MB (16,607,376 bytes)

Copyright:
Copyright © ocenaudio Team. All rights reserved.

Trademarks:
ocenaudio is a trademark of ocenaudio Team

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Digital Signature
Signed by:
UFSC

Authority:
ocenaudio Team

Valid from:
5/5/2014 8:28:50 PM

Valid to:
5/5/2015 8:28:50 PM

Subject:
E=ca@linse.ufsc.br, CN=ocenaudio, OU=LINSE, O=UFSC, L=Florianopolis, S=SC, C=BR

Issuer:
E=ca@linse.ufsc.br, CN=ocenaudio code-signer CA, OU=ocenaudio Team, O=ocenaudio Team, L=Florianopolis, S=SC, C=BR

Serial number:
00F478BB72717C40F1

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:mW+obXmDYmNw/keVypewfZl5u520tjVFbYfvCY2VJZNZTZA8yg9qgMM1:mZoDmDY1kGypewfZzM2a/8fuJrBCC9q8

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file ocenaudio.exe has been seen being distributed by the following 10 URLs.

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1480500419&Signature=ajkv7wIpcXud5yFCYHoBeoGAB6uj87lLX-VSqlLf0kr85scpngDbEV-n6P6YjOl9haT3VUJdH5IV5wFyCShrhMEUeW1zkdGQ1yk8-LCDRCwCANIivJlsFDayfsYjrVze633g7-prXPGQZ~yNmhaIKMTpJWLCirsXSvUx1TPeWyU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1477180694&Signature=KnWrRPtDk6fNuSmUX-3hoXts~4~yrsgt1flg1x6sH~jgZMEkga2aMjC35nQ2RnpYYI7Dvz6JTW8Eo8xLgsjhm~RAD--zLeHBApbz3TH1GpiW~sa8AuY2mrz2jk3l1qUQmhik5nPKyOAaEzJY5BLQJCaIf0HnMqCj2aycBgomhlk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_fr&type=PROGRAM&Expires=1481110441&Signature=h1v-ihDAehyDxtv75~0MjmR~exEfs5Z7cLcAdX01XkP0GBuTO27HbuoSIhb-bEoxl3WlnPjhjrMgKCDe~iDHVBYJr-WBv3cXDA20O-3ZowbOtamG8zzRy5Z6YQKXHoogLdlQaitNfMCRflwg5pRuX7ALhie5tBemtG3dGewhdgg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_fr&type=PROGRAM&Expires=1477272466&Signature=cCxPmp3EhIs-nWKwTFbEbgaR8cl7MQAuZs4S8Wl9ZaJxl0GSrqhsaiXzTEZaolwiJQaAHsiCYYt-ca~A-WQb7sDInvRss7tTme7723bJq7rvyDYDvEt49iTgZVHlU9QnK~Y-xpzQxc1832TjxQHwCZ4P3C5k94YQf7dRGY4CWnQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1463109775&Signature=UcxrVReRgqGrA-EmG7pDoHue9iT-p8L51vqrVi5NSDiOupUUhWKvAKuhBvBcCPAPVqwa1axBQClEan2vaRpeKyIsyv3o~736tiTmdpGDYeb3uP7W85ds6~wf0odZeqOJDQNNGGuIhw1XOn8Yr8yem6pIL5UaoRw5TC1QgjYSFrk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1464319711&Signature=eqahS~G7y7oTZiCbVlZFdjYg23vD6UNyOV1OLfQAZm9bwayqBYX0Okt4RyAjJ9M-kDdr7ME0ir55k7OY5PYyRjlHRHs0abk6bu1vsFm29S6CIwDLjl7P2eR9bkMq3ke4s9I6l1-mWeTXkkLaU2ghWAPOQaAA5vqAxTv8G3I5s1E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1454994848&Signature=W3swkOupoL7kVMpqXoPQVqBB2lWhUb38UO85DfP3xVnBO-GWuZTg40oYkS0-naWeeUjkQgP1SdhxhIjvosCyV8GCld7dsyx4xvnN5KFXc0GkoHUs1OZWl2DOaSGqGoKEkPyS-WeLLKwM11HFw9qXDwqGfW8edheXVoF-ev9~wHg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://gsf-cf.softonic.com/1de/90f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3348767&instance=softonic_es&type=PROGRAM&Expires=1453110876&Signature=Tafg9ZJzclctdw6pEbkTuXJyyXsud1DbSds7x75ZRXbloT47I2vtz6UXPW7zhgbmrJq1jkFoZ-M3FTjOk2D8jdTbSmS7OVS94I1FbTPOna9uvznA7HZGm51FobrJN0pBrzZValv4gTGJa0ZxtWE68DoCIpawdRbZTJuvLgBqMSc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ocenaudio.exe

http://www.ocenaudio.com.br/downloads/.../ocenaudio.exe

http://www.ocenaudio.com.br/.../ocenaudio.exe

Scan ocenaudio.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.