home

aida64extreme280.exe

AIDA64 Extreme Edition

FinalWire

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from aida64-extreme-edition.softonic.com and multiple other hosts.
Publisher:
FinalWire Ltd.   (signed by FinalWire)

Product:
AIDA64 Extreme Edition

Version:
2.80.2300.0

MD5:
e4661bd1709f76455f5f3db586a40ffc

SHA-1:
0f212dfbba836beed9fe263a765f3521b504a925

SHA-256:
bc87873526fa7ea3a6c15b7b47ea75117d7a3a6c785e83133245e3a05eaf2ad4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:37:29 PM UTC  (today)

File size:
13.7 MB (14,318,808 bytes)

Product version:
2.80

Copyright:
Copyright (c) 1995-2013 FinalWire Ltd.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\aida64extreme280.exe

Digital Signature
Signed by:
FinalWire

Authority:
VeriSign, Inc.

Valid from:
6/20/2012 3:00:00 AM

Valid to:
7/29/2015 2:59:59 AM

Subject:
CN=FinalWire, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=FinalWire, L=Budapest, S=Budapest, C=HU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3439A0CAA1EE5C4A5B4F5DAC1FB69469

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:PtyVW3mDg7nkEKss5WttlzbUVWeQE8qIW:Pr2KnAjcZsb8qJ

Entry address:
0x9C18

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, AE, 94, FF, FF, E8, B5, A6, FF, FF, E8, 44, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, D4, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 9D, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 5A, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file aida64extreme280.exe has been seen being distributed by the following 7 URLs.

http://aida64-extreme-edition.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuQNUg8DX 42E9y4ATashVeq0rbaoc7M5Dv2pt8I EYQ6xE4JnjEZeiRMzzMBuOJCAmYTT/C 5oAko6wb5BJBd9/.../VesNBUPIltffzOXKGNWYYeeBJLaZKPwfxI=

http://letoltes.szoftverbazis.hu/WVyIkPMFsvyd1FIZPtI90w/1458295369/.../aida64extreme280.exe

http://gsf-cf.softonic.com/0f2/12d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=315989&instance=softonic_es&type=PROGRAM&Expires=1421724549&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=WTTSzb6TNiWu5OfwzaHVWrgw6RH0Op4SPjLdXvkymatkafSbzgenib~4rEQ1qdRJTcwsV1CR9NXcgcarJ7Hs7Ie6xEAGjZrk6XgDxfvJNnx~kKQ9OViqnP~rH2MRWMkGoXS5TeNtb8W~V7lwKGOo0xuaFIPpl2yawLk88yqcf7M_&filename=aida64extreme280.exe

http://gsf-cf.softonic.com/0f2/12d/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=315989&instance=softonic_es&type=PROGRAM&Expires=1422896138&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=P~dAuF3EiMxPW-GTybG160zKCTlDD~1SZnnu1ZM1QbZVnL71Q4Xj79Larusbrb~4RNPVfTpUCfwFQ5sd1zrYmqzu4b5m7TtkeD8BHEPV79mmKbHM9DSuIXT39xFCYkANgVQDgSAOXk8i81NO8Q~TEr2NwjjgL30SQtiR3-TxrZU_&filename=aida64extreme280.exe

http://www.chipmalaga.com/aplicaciones/.../everest.exe

http://download.aida64.com/aida64extreme280.exe

http://gsf-cf.softonic.com/0f2/12d/.../file?instance=softonic_br&Expires=1417675420&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SA8FFXDwPATrB6ruzpmvHKAf75RZZp8ZhJH3UD1~iFqm3wLhrDRFwFK0lgR7rZL88Ws-En0GggTda2z-uISZOJ7sAZBycaE6dHeU5JAdYA6r6RfU6iYJCqwQi6QTMNHmEqtqWEvXqTu7giWtXMrVoxjMHu4N~FrjwcERlWPiIEc_&filename=aida64extreme280.exe

Scan aida64extreme280.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.