home

airxonix.exe

AxySoft

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.regnow.com and multiple other hosts.
Publisher:
AxySoft

Description:
AirXonix Setup

Version:
1.45

MD5:
cc5237ccc2e0c48b013b0ad7263e73ba

SHA-1:
fe5374cb28539669f748e6d58f7c1dfbf99a3696

SHA-256:
7411d9ce3e2041a5fa57e7e6cd71a931e3ef307882c2749ac3aba0f541b88c2e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 6:07:10 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Trojan.Win32.Injector.cyymen
0.28.2.60881

File size:
3.5 MB (3,665,109 bytes)

Copyright:
Copyright © 2000-2007 AxySoft.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\airxonix.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:yGwIWdmv6XfUc8i0YkA1oXByfAnI8GP8KgPktGQRCy+Aj4g1BYKHP2VM/tLb9QuQ:z6dmvw3833A1CBpLKvtFgAD+GIEbo

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9982

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file airxonix.exe has been seen being distributed by the following 17 URLs.

http://www.regnow.com/softsell/visitor.cgi?affiliate=17209&action=site&vendor=4174&ref=http://www.axysoft.com/.../AirXonix.exe

http://downloads.boomba.co.il/go.php?id=14

http://www.tamindir.com/indir/MjAxNi0wNS0xMiAwMDoyMzoyMA==/airxonix/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0yMyAxNjozMDozNQ==/airxonix/windows/.../

http://www.downloads.boomba.co.il/go.php?id=14

http://www.tamindir.com/indir/MjAxNi0xMS0yNCAxMjo1NDoyNw==/airxonix/windows/.../

https://d1ob5g40gc5b6g.cloudfront.net/31/300803/.../AirXonix.exe

http://qpdownload.com/download.php?name=AirXonix

http://lb.cdn.m6web.fr/d/c/a/9a84d56f7c8e61b4506c997dabaea493/57e2ea56/soft/.../airxonix_1-45_en_10532.exe

http://www.megadlcenter.com/HhA0a5LEtuTrKAZoOCRduPRA4wTGY1SEXpSQEV BimJoJK3pES3fmawm gfGVIrgSWH4NPPrfkWE2XG ocJt4EvIF5mX0FgJG6dgZ2YDWRQNd8vguHk957CTVHY3dJZ2wckm9lu277CHW7bAlVa_rXvLmq DfCRd_Vn4 Iev 2bRLgRp4riNLjd4nEf_r3P8O8VxtoKPrrN0UqBLSRFPU_Ew9UHUsKXoKr9lj12bLtnXlfwzEQIRSpUGBjpJOxbNoUeeFnKxmuEOpPQvZJA392_8QBKs51_C7usLze9UZ1K833bCnlEfdj_YMBI2oTDeHX2Qn82PwKtWkUFF5e7C691czUT446JOdLixxFvgiXUp2RfvnqPCtvLoqOYHCrhlZdkVBXVf1f5dbLEhgsp_FkABruYMXT2gINtN962pSXahv ys dV9j2OpoKDa9bMDoHgN4U5Evnf2mHH1Z129gNATHxJ4olTHIqleMbgBJ1mawwWrw OeggKi_FEv2SjOmHSw98Yk-GzkAAMSJh7aAJzYdBMn_R4FDDhy gzYPMAAPHHIih29BWa5x_lORhnvLwcq5R0GJlkbLg1sMAQ==-e

http://downloads.yo-yoo.co.il/?act=download&id=97

http://downloads.yo-yoo.co.il/most.php?act=download&id=97

http://www.nex.co.il/?downloads=15

http://airxonix.software.informer.com/.../

http://icegames.co.il/.../AirXonix.exe

http://airxonix.soft32.com/get/file/id/.../?no_download_manager=true

http://www.axysoft.com/.../AirXonix.exe

Scan airxonix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.