ocsetuphlp.dll
Rec Helper
OpenCandy
The module ocsetuphlp.dll by OpenCandy has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
OpenCandy, Inc. (signed by OpenCandy)
Description:
Rec Helper p104
MD5:
9afd57770e429be3036361ebd364f98e
SHA-1:
cbb6144728a9492d147d22f7692d3593469191b1
SHA-256:
8ee1b4699e521aaf6f3961170ebd8f98c44a1b39bb40782b776ebeb47b6195b7
Scanner detections:
1 / 68
Status:
Potentially unwanted
Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).
Analysis date:
11/23/2024 8:13:39 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.OpenCandy (M)
16.9.19.6
File size:
834.5 KB (854,512 bytes)
Product version:
2.0.0.279
Copyright:
Copyright (c) 2008 - 2015
Original file name:
RecHelper.dll
File type:
Dynamic link library (Win32 DLL)
Language:
English (United States)
Common path:
C:\users\{user}\downloads\01-divx_plus_pro_10.4\dist.divx.com\divx\offer\opencandy\ocsetuphlp.dll
Authority:
COMODO CA Limited
Valid from:
8/25/2014 9:00:00 PM
Valid to:
8/26/2015 8:59:59 PM
Subject:
CN=OpenCandy, O=OpenCandy, STREET="510 Market St #301", L=San Diego, S=CA, PostalCode=92101, C=US
Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
00D8969D7474F2E05D880A6058A425B9A3
Compilation timestamp:
2/24/2015 8:08:01 PM
CTPH (ssdeep):
6144:1QZofFhJw2gdqyD/i5mPgOsAtK/vZyvqosgVRgTB6SM2ekOTis5oMtoKbCEs:1QgnJwzdqyO5mPgOsYsqgTZMvbthbCEs
Code size:
515.5 KB (527,872 bytes)