home

Au_.exe

Ogg Codecs

Personal Email

(Note, the name of the file is not always 'AU_.exe'; the NullSoft NSIS uninstaller changes the original name while copying it to the temporary directory.) The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with multiple programs including Ogg Codecs 0.81.15562.
Publisher:
Xiph.Org  (signed by Personal Email)

Product:
Ogg Codecs

Description:
Directshow Filters for Ogg Vorbis, Speex, Theora and FLAC

Version:
0.81.15562

MD5:
26314b43365b89bc551d83e109830bd0

SHA-1:
a32b632e899fcd10c0233a8ffac06c0925852b54

SHA-256:
e47af163f303377fa2c43d0a883f86746b51c7aedda70dddfc640e5b3601fd37

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/28/2024 4:10:24 PM UTC  (today)

Scan engine
Detection
Engine version

Panda Antivirus
Suspicious file
14.01.05.04

File size:
88.4 KB (90,520 bytes)

Copyright:
Copyright (c) 2008 Xiph.Org

Trademarks:
The Xiph Fish Logo and the Vorbis.com many-fish logos are trademarks (tm) of Xiph.Org

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\au_.exe

Digital Signature
Signed by:
Personal Email

Authority:
Unizeto Sp. z o.o.

Valid from:
11/10/2008 6:13:52 AM

Valid to:
2/8/2009 6:13:52 AM

Subject:
E=cristian.adam@gmx.net, CN=Cristian Adam, O=Personal Email, C=DE

Issuer:
CN=Certum Level I, O=Unizeto Sp. z o.o., C=PL

Serial number:
045FDB

File PE Metadata
Compilation timestamp:
11/20/2008 9:28:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:YYTmwVUsW7dtJMHy0DxmJVeIBQJ4TAZzeID57GX:rS17XJiDxmJyJNzTs

Entry address:
0x30E3

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 58, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, 23, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 90, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 4C, 91, 40, 00, 68, 60, E3, 42, 00, E8, DA, 27, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, C8, 27, 00, 00...
 
[+]

Entropy:
5.6063

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file Au_.exe has been discovered within the following programs.

Ogg Codecs 0.81.15562  by Xiph.org
xiph.org/dshow
About 4% of users remove it
oggcodecs 0.71.0946  by illiminable
Publisher's description - “Ogg Codecs is a set of encoders and deocoders for Ogg Vorbis, Speex, Theora and FLAC. Once installed you will be able to play Vorbis, Speex, Theora and FLAC files in Windows Media Player or any other Windows Directshow media player ”
www.illiminable.com/ogg
48% remove it
 
Powered by Should I Remove It?

Scan Au_.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.