home

abbyy_finereader_12_professional.exe

ABBYY Production LLC

This is a setup program which is used to install the application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
ABBYY Production LLC  (signed and verified)

MD5:
fea48e623528e34481597e94473d51e6

SHA-1:
5fe69241621373adb0d96925b3ba7a3c4d59580c

SHA-256:
75f68f5696cbad06516cc2e8eff6f047c903208a74541a0f5c7188e21585ab46

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:24:52 PM UTC  (today)

File size:
351.3 MB (368,371,848 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\abbyy_finereader_12_professional.exe

Digital Signature
Signed by:
ABBYY Production LLC

Authority:
Entrust, Inc.

Valid from:
1/13/2014 2:45:55 AM

Valid to:
1/14/2016 1:00:24 AM

Subject:
CN=ABBYY Production LLC, O=ABBYY Production LLC, L=Moscow, C=RU

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C17678A

File PE Metadata
Compilation timestamp:
6/9/2012 5:19:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6291456:mVOzdLS7pSgeLdtEwRW9Y5/+wlDm1ihwynltGq7NNpaXeO/hhc9JJ4aTUgr9PTYp:m09SwVjRW9YJ+wlDoiwynlx7Finm9LSp

Entry address:
0xAC87

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 9F, 30, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 8F, AB, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 24, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 24, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 0E, B1, FF, FF, C3, 56, 8B, F1, 8B, 06, 85, C0, 74, 07, 50, FF, 15, C4, 40, 41, 00, 83, 26, 00, 83, 66, 08, 00, 83, 66, 0C, 00, 5E, C3, 56, 8B, F1, 80, 7E, 04, 00, 75, 34, 68, F4, 44, 41, 00...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
73 KB (74,752 bytes)

The file abbyy_finereader_12_professional.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/2b985ed810f6c8f7df6038693f3315a9/5863d5b4/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

http://soft.mydiv.net/win/dlfile5f260_267627/.../ABBYY_FR12_PRO_TRIAL.exe

http://fs2.download82.com/software/bbd8ff9dba17080c0c121804efbd61d5/.../ABBYY_FR12_PRO_TRIAL.exe

http://dlp-ru.abbyy.com/?linkId=97aeb171-13c8-43c3-a70d-dfcd9ebf9bed

http://d110.cdn.m6web.fr/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

https://store.abbyyeu.com/c/.../ABBYY_FR12_PRO_ESD.exe

https://store.abbyyeu.com/.../dlreg?t=99psjWIMOPj5zD2JAe7q&k=110924033

http://dlp-ru.abbyy.com/?linkId=3874b059-fb7f-4929-b573-52fd51b0b812

https://store.abbyyeu.com/.../dlreg?t=99irOX2cuYApn5nNmphO&k=110941961

http://lb.cdn.m6web.fr/d/c/a/6312547d9f2f8172de8abe4d79c77eb0/58282826/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

https://store.abbyyeu.com/.../dlreg?t=99wjJ6U5j1Uz4F3BKAGw&k=111023003

http://dlp-ru.abbyy.com/?linkId=ea8988bf-4e9e-448a-a234-a3a0eb00e60a

http://www.downloadpresentcity.com/4IEHhNMJF56PRnnASmgqkkCZU00QFZpY6oBtf2nrSh5YlHRlbaGc1w gDTQGR0WVmu65nUMdnjjY6NE3nMrfqCMocVCmxDdAUJD3kjgo8XHyMzim31QE0_JVELqTcPlw3AZDGTS uSrclXnN3sKFe0iWtWT0uXh1M3XcHWWnnomTzCNzrnE=-Gx0DAGTSTRoHXhAdXZuGhQvqFQoTOWBviyHmk9h748CTNUZ FoF5Fq lmuo3ek0X3mvl6wKwgOHM5p57UUIFv2Dyde14QpSu3c888ideB7RSe1ZxtP3QJz_opneLMxk1thjxnDBmzvpBQq5l4jHn_kahbVvl08Br61ZKk_juvvk0SUV64fB3kXrr3r HohG3Ot97liD9pQyNh0JWLDwliERFaN3pmAqnGzd8uodwH2HH28aZaCdNJs3vszjRABW14XpM32gifEjYsnt b_mHzT hjAj0OFvSipm1ras486JQc4KZfxSDMyzb_VWw39KgZzEjjVN45e3mApfDUl4cymCXtlqu1alYyitsgc2IE wv8SlP1C3WkMoqW__5Gx5m8Se9O4UgNhe3U 9lrMddpm1qM4D2xs erafXmux v4leXXCEa5DrOT7WKbNvhUi8BB2jxc60FwurN5QUzccNEQGjtBbj_BD0dvuOatwRoA480IUHjgTz9cbXqgWUkoD0Gq1fqU7fRCwPdzWPWNgNGLBcTvgrYo_3razJPYHirQ3b TI683f2TuEuVfqN90TU8ge2uNX6VaKeZfC0HO73G2skv7CfBg3upy9etufUY9Y3Jp1c549sAD4aSIDurVtv BpOMhyd_c7tHpchz4TJatgw3Mb9gBtKi3A5yRTQp2EtU82cCXf6n4WLlNCEOP8Z1jHJvc4lS1D 1QlXFN2QJPNg4ryvjf3whyGp6fnEke_HYv645L5OAZK6czCpw1s7DLwCUogchnpzpXxI

http://lb.cdn.m6web.fr/d/c/a/37d7ce27381b08edd1cdc21c7134e7d5/582f1925/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

http://www.vaultsfarmhosting.com/c?x=4i2xJPuXeCJGWx7EmPNi/qnCzZeyRJkXKA7U5LPpLpg=&e=0&c=7MBEYMrD8ipVWkymp1TTvCi1kC7H1rcURNbVHvSEvHGCAWmxbrfnqWJ3Y5EBlLvwK7VXAdHm7m4GbLBZhagq6mK LuQkbwT7s3Wpxv4fsuVJnWxDwJN3iNZH5m4IHR9bmiJHnI5rd2DayAqYQpD66bjdBspNUnVX PBY8AaqQpQ=&downloadAs=abbyy-finereader-12.exe&fallback_url=http://pf.benjaminstrahs.com/s/1468510931/es/.../2/227614-1802931-abbyy-finereader.exe

http://lb.cdn.m6web.fr/d/c/a/138c6a8c72f8bbbddd1b5204cb421321/57569ed6/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

https://store.abbyyeu.com/.../dlreg?t=99qBU7a5C9UHJ8g94tTK&k=110781704

https://store.abbyyeu.com/.../dlreg?t=99V8sNBeah6SpVst1Krf&k=110759141

https://store.abbyyeu.com/.../dlreg?t=99rHFaBOdRkhq2WOHkK3&k=111007574

https://store.abbyyeu.com/.../dlreg?t=99P6AMlsRnfgbLZwn8Mk&k=110789714

https://store.abbyyeu.com/.../dlreg?t=99oEBMkD3RWG5ha6Ln9c&k=111033359

http://dl.freesoft.ru/down/77e371d46845795057cd3a1dc6b4a945/.../ABBYY_FineReader_12_Professional.exe

http://dlp-ru.abbyy.com/?linkId=412ee9f4-b719-4806-8976-597f605e2572

https://store.abbyyeu.com/.../dlreg?t=99IEJYqVXQh4g6jiANDK&k=111017039

https://store.abbyyeu.com/.../dlreg?t=99gkLFi5JkLSANKpV1Bs&k=110599433

https://shop.abbyyusa.com/order/.../GPbQ==

ftp://product:RlsiKphxc7wL.@ftp.abbyy.co.kr/.../ABBYY_FineReader_12_PE_1214_6.exe

http://dlp-ru.abbyy.com/?linkId=1e20d515-e4c1-468c-b387-b1f2d15fc807

http://lb.cdn.m6web.fr/d/c/a/9f50777e48a06af046023565b2472c8b/56901976/soft/.../abbyy-finereader-professional-edition-8_12-0-7_fr_122126.exe

http://dlp-ru.abbyy.com/?linkId=884d0c16-7255-4822-b7cc-42256b39eb8b

Latest 30 of 56 download URLs

Scan abbyy_finereader_12_professional.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.