home

abcavi.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1us.softpedia.com and multiple other hosts.
MD5:
01bdce5c342ae8962f665b76dbc1a8a9

SHA-1:
37fc0018024a5e0a7e34ee3522be652254d9672e

SHA-256:
1dc796858a87a5b21bd6153cdbcfd2e997b3ddced59d6538ceb7dc02a8f09f92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:01:50 PM UTC  (today)

File size:
2.5 MB (2,599,520 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:jEO7joxN0I/aYf3yOloPqOFPyXIw77zG0SKR8P6BHd55s31xUYBcR:b7jo5/aYfysol64wPX3R8kHd55s31+YI

Entry address:
0xC5D8

Entry point:
55, 8B, EC, 83, C4, C0, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, C4, 89, 45, C0, E8, CF, 6A, FF, FF, E8, B2, 7F, FF, FF, E8, 2D, A2, FF, FF, E8, 74, A2, FF, FF, E8, 63, A3, FF, FF, E8, 12, F6, FF, FF, BE, 28, 00, 41, 00, 33, C0, 55, 68, DF, CC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 6F, CC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, F0, 40, 00, E8, E7, FE, FF, FF, E8, AA, F9, FF, FF, 8D, 55, F0, 33, C0, E8, A4, ED, FF, FF, 8B, 55, F0, B8, 8C, FD, 40, 00, E8, 7B, 6B, FF, FF, 8B, 15, 8C, FD, 40, 00, B8...
 
[+]

Entropy:
7.9926

Developed / compiled with:
Microsoft Visual C++

Code size:
47.5 KB (48,640 bytes)

The file abcavi.exe has been seen being distributed by the following 10 URLs.

http://download1us.softpedia.com/dl/b713366b3ac71e98ec1bb974e5c3cff7/4ef93533/100023454/software/multimedia/.../abcavi.exe

http://gsf-cf.softonic.com/37f/c00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43585&instance=softonic_es&type=PROGRAM&Expires=1463180289&Signature=EX8ZX3bHyd74NxU2yxtTiHINJpk8pYTrZBk4PV4NUcFSuQZKY6DggBEMLMvZNPg9BqZzxZMopt0jiieZdVUpddri~-Xk~KpPRf80RifSo6GVlq9DctPNzyoOJYH9xaYC8fuFR2QwpPqghkXlBldo2yxfcCaRYgcegehr0RkNm-M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=abcavi.exe

http://s3.amazonaws.com/moviecodec/.../abcavi181.exe

http://gsf-cf.softonic.com/37f/c00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43585&instance=softonic_es&type=PROGRAM&Expires=1466103069&Signature=Dr2wqqyWdhNoTvbRoR61VD0c~fyh4nd94520B~ggQJlYU4jRP-3AV~ayJG7Ap2FHOZGjvd50xgqgq77JXkFbVvZnbBKorN2OvtTkK3zDy0HnfEvErfAIX~tqy6MAC5kG9BRT6Bz15C~d6NSEVu17jywjlCAiKFK0JLa-2N-Xhfs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=abcavi.exe

http://gsf-cf.softonic.com/37f/c00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43585&instance=softonic_es&type=PROGRAM&Expires=1448899308&Signature=GCjo8eKvGhkjsQWCHkvJP2qmYt5gVaT69e7BooutLgfWLMJvGOY-l1XhmyzxrS1A3UJBOumyCfAytSwtNIUxlUqiSXvZm~M2j5aqyQ54HCSoxUN6JIAVBOB9HlwWgGaJfJD~ulZEITH6Q5UbrKzYKBSxZs~B39d5AxQY0OdfURg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=abcavi.exe

http://ec.ccm2.net/es.ccm.net/download/.../abcavi-1.8.1.127.exe

http://gsf-cf.softonic.com/37f/c00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43585&instance=softonic_es&type=PROGRAM&Expires=1452649337&Signature=gP729fFDwgQ9eZhqKrQbcpenNxQfAK5pENnpkJO930mhV6JwAHKitr7YdcMEgqcV0q5aSO5JnMXbKawSrRbAOiPOruGvq4LkqS~do2A3R2hFwY7Gbk2GjBl9eajWSqrdmE7Lc3ux0mh-i0cEQ~Bf6ZZ4NC3EYBA5j5Jp6-tFbK8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=abcavi.exe

http://www.fourcc.org/.../abcavi.exe

http://abcavi-tag-editor.software.informer.com/.../

http://abcavi.kibi.ru/abcavi.exe

Scan abcavi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.