home

atg.exe

123 AVI to GIF Converter

Bitsoft.net Development

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.downloadpresentcity.com and multiple other hosts.
Publisher:
Bitsoft.net Development

Product:
123 AVI to GIF Converter

Description:
123 AVI to GIF Converter Setup

MD5:
256a5b31d1034ff7428ed52278f459cb

SHA-1:
ff53fba088c37bf43b92de3a0d2b10d3d3be9206

SHA-256:
4a53d89c085dfe0ed6a7b9a9948b7d7d8d4e656a285ea48a50f826cd5bff04fa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:54:55 AM UTC  (today)

File size:
7 MB (7,339,662 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

File PE Metadata
Compilation timestamp:
6/10/2010 4:33:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:Af4ooTtE2OFbb6u1J5ZiZjYzWlncYffxhUGb:A/gtrOFbx1kZPNXffQy

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 54, 55, 41, 00, E8, 70, 04, FF, FF, 33, C0, 55, 68, 91, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 4D, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, A6, EF, FF, FF, E8, B1, EA, FF, FF, 8D, 55, EC, 33, C0, E8, FB, 87, FF, FF, 8B, 55, EC, B8, A8, D6, 41, 00, E8, A6, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, A8, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file atg.exe has been seen being distributed by the following 7 URLs.

http://www.downloadpresentcity.com/nM8eqCAzCkfz98P0qsucPeoJaLIO9B5l4UCcG5TkLeIgXRAKfxB8CKymx_UvqwI_O658a A0u6NUxB8yhiMOZhGgFN326rpWgdXFLvWGdMo08xhWuhZHk01QpNDZvhGAjaxAO3SQrnUM6tYQvJCHe0gE37n3kzpG9PG8DmNbhaJWOrb7nrgn0ebgXNiDp4pcMLYaFEUm-Gx0DAGS ttEfD2wQuT8ZHDKVCy9DhYaJHLC3xRDzSey9ceDJGiM_i8Bcsm0qhnJPt2HFey0BQrcALcHhgJPoPMpJgoiTA7ILOmspFiUXex9bz68EAzp56sp27hmuXyMX Jp2Hsh6wE8n15V6ivX VpUzqBH15R oFASMcF_lfk35ngTJzvM4Au2IoXdsZ_SKaK9jMoltZNGKjMPF4rWQ8kyooshaWbmsDxLGGCVpX0gN98c3fHMWae8vYOy68EG_9N4LxVo5ue0i8mr60stlP_i1gJ3ctmLhbOW8z9UiupA7DCgGUDxd6vE0A JV41uCg5NIzw9aYSYVqd2gxGIRqBjJNXkABT9zubB2UM5BojYPtKmf4bFA3GbmSzenz56oIVU prXBb9Cm 23n nN_An28sEKL2ZB n89z UhgRmiCVFimztp79cTJW5YFdoFcSZt5V0tjJjTPl2i4bVvJquysrBSm20COGC4rXvo3jv32W78XNknuhh7ayOX8ef6iaBIGz3Lo12qHU04ER5qHs43tBQkDgbgefk mn6oa Bl2OzK2RuNZlSe4zDPuAiJ4zAfPCW3tfox80nN0dUZEnjNPIpZzjhTveY95VMU5otfFWQV5Uyhxmm1KfkgK7Hs 4oMWoTZCD_xW8riEkh15fM_wyg5XaV1cUMHBH74WvqvMtasdfVc48fC60HArEqvidLCUsdNJbPEp_TkyPyVs5nnLb57wMKYsJOELmpYMNE2XC9BgLA7qDLs4xeZS

http://win.cutephp.com/go?p=10754

http://www.ranchmetabits.com/hBDHCKrWLIdGpwPmLxm5dCRe9LuYEG4OMCCmRHwNzOZzv0zZQJUmMm_DhrT3ijT5RoTuOX71cbDjDrECT4LlN pxMKmrbWZFJnMcHRwyFNSg4oRmWY7urd2qXI5iX_6H9 rF4NFkVzzDmuYsjWnwJvtOnjk_AuQOq07LjDyiZnBtKPb9_8k=-Gx0DAGQ t_HjwA9aGI IWnxUSh2gMJED9rYYYj6JvTcOPFlj5GcRmEcBl2qqrxxOJ95rTaElTIM2Kug3e3Q6HX33Q7QX0d8ZRhs HlOoQsrF5 1vga_zkCgOUnMlXGsbOqjxiSKFWGw4vsV5QfKkp2Zxk4Mk9nqSGc4Z DX p1hw414beFSM2i3BRSAn_pxCxzhYrTj9AZBfBgNiFjLs97aXaEEWnM2WadbDdaY2TSWbAH9GLAHzAyGrPQG1vkQ5bIGtQuSMw4eQFVhy6vPxz6ZozgCvjWAwK Ujce ZLCoJX_a0lZyktkHgnMpIgPDYon4zjIXNY622B1cC XMuQWLZBPx6BjzK4vuCL7u WftxLxOXUvRy7rSBwKBmTbDdugeENQMm5wGboEaneTx8jjp8bI8bHYNomHj 5Yzsih0XEqnCwmOLozV7Z8FGL8R3SBiZONwyV2WbSAJwSYBjQRRKt9PjoZciZntnerqZIM3q9JuK7YvhaR9RO_Mo6BEgyrj3sTxYO3WSqtdleHfHZi7uukdPjk3 AsEisSgSTg86qxqG2akFzVunmgwrdNA7evFmpOcZgxt3k7v5YpT3aRZf2dSXdM20HxUfzUSn8kyiik_qU3_5Y9x4_iZoqapLp0s8sZc_W83LniDzgsz2RfRTwgIO1ft0uIyWERLS4k3BOR2gkPpLTTGbldaVkFAas2Tw8LsEEUrmr4x9ALCDLhFvcykiUkxFy1Y4XTeUiuswBufaAvuyqsPm5CtH95kIj2k6OOlCp9Nnx54lly8q30

http://www.downloadpresentcity.com/B57CyTQ47W64OVYQtQmu7Vqf8Hq7eQLZRRo0nWrR sSEPy8_ZDwpPB5aZnuzOD90WBWPyjUB5JbSXOYVdbyp22VLBEZ2IKaMbJi0jQI00v43sRb1h1MXfoNwBFE2ZU27tPYtdA962uNblRm8r wsIh0FA7ZDlkObYY_Whtx6PqqKNmxGR w=-Gx0DAGT6bfIx8AXRyAMfNvAVTsRhIgfsbTHEfBJ7bxx4ssbIzyIwt_QY8744k6Pf8V5rm e0v1smIkKJhqC6_Ab17h28pIV6nvB7rzrpaTPFhrmkwPGoqMmPHYW3ErDJGmhZyKRhmT06pEEbHAnxVwIy43XAhRNqLi9U4_BL6vZH3gY328MGme0gKNgk33HgR4JTdvm2jJCpel_RVvFEjNLkmRRU49BmdVYQIgpPvYQ9D_yvTZO9OSC24fMlaPJDu47v CXwjqcD2nxKvcwYlvh28HArj2EleFUU9qe3NaQkzdCLW5d9fqoqLAmtMpIC5I7_sDiFjRjruhm 4_h08vKjdFpvT6M5GvyZsjnlItiGNmrCKNT3cfKkYViQGAc yRFqau3NZWigSFvVxJ7ID6ulWD54f094H0gqeRp6GAD8XhWOGIdflgLK7RCO9PJnxFerZySPGrANLz_dnCgx3jahJW0nLBMF4gZI_wQWuSzYCgHBm3ztw3r7JQ6vEgeFZHUFpmUvn_RdG34JX8s4wChxkyPy1SS8ReONZ3eX7_mVmxni FvzITw41jMyoA0BpLryk85ytCeZ3xJ46ZNYFOpsvCjV AgAyYNGjpTTo1KAs6tNzy yPmGj2Fsl4SHthP2qFRVYxXhbFeUk8tOMKRohh770lDZSP35geNbay8gHSElbnbdgLAFD449_Y5NIAdyOA lH4cf yshE8uabh0Klz6mPi5EgmHK4PPR5BzUCI2CKkUeRrGYBKcSeB0wb v7DYgn3O8O0znQ

http://www.signbundlefactory.com/c?x=xinmQxMXKafW4CkDd52pdXJ1 bXXEqO 19co1pdKUV4=&c=ItTf39u69m4isVaU 4HYx8WA4GxOSw6s4Eo0WK/Tucz2wfV90Q/VsegQvVi3aqE4vz9gFyYyc7LOevS0Q3rlq3ljlf53qJgkmHUwN6aD r1NbKQrwTaOYYPlNbvWnqNql80ICT0xNECuMYZOhX5VZkgnEZC7vhJdQek4OZnIyGcHPKGIXiE9JiBxvxe3sFZx&e=0&downloadAs=surfer-4.exe&fallback_url=http://pf.benjaminstrahs.com/s/1459741874/en/.../2/224586-647695-123-avi-to-gif-converter.exe

http://www.bitsoft.net/.../atg.exe

http://en.kioskea.net/download/.../download-14516-avi-to-gif-converter

Scan atg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.