avi_recomp_1.5.4_setup.exe

AVI ReComp

AVI ReComp Team

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
AVI ReComp Team

Product:
AVI ReComp

Description:
The tool for re-encoding AVI clips

Version:
1.5.4

MD5:
69042e43c8dc919dbc761484efcb9752

SHA-1:
5b562f03a26a5c5d1d68d1214bea20b63f87f5bd

SHA-256:
5de7b62b990a1a5a15743b2bc1cc45b78e7c7792af92b19ff549350e7ea09ae4

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/30/2024 11:26:17 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Cryptor.CDP
3.12.26.3

File size:
28.6 MB (29,987,288 bytes)

Copyright:
© 2005-2012 Mateusz Gola (aka Prozac)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
12/6/2009 1:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:y+SR7gIPSRoLT8UIEFqIvtFZ4wa8KmPZvPSa98o4PHy:y+Y85a8UbqI+wajAZya989Hy

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9956

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file avi_recomp_1.5.4_setup.exe has been seen being distributed by the following 36 URLs.

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1461704735&Signature=MGJGtxmGfAasEvCy3G-mALxx-qb0PDvtjb~Kbux89eNwnnI-1rWIkXEDPH2LAKSRMTM~dCK4muMr1yOw131SUx01EHqN-A6z3hrJPY9pfwh5XCGQ31WSauFxez3vMFS~SkSdtnRO5XoHKeGahpwFhky1i0TdOF3iBDRo5o3ofOo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1481894297&Signature=U498VMf6eiqGqOSImPxLJjPy3siCVJourpO5A8-oWWblJl3HHzOATzqAGiDWDTw3PQIkCxumTnSGE3Gy1rhHYXuzRjPSTCCr0blNDbwQ6VNMtCNgNFPlaWI8zr1l7goCQoLAPdfzYJxC40y3htOvodQ0wu8SZQ1yGdH77Y9gyKg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1476147220&Signature=CW7Is2vuXYO30c7auhqvL-10mF3jQ9IFT35U2N6rMLMIBqkzEFvQmIJBu8bCckYS73c8QhkWAVwYM5HO71elJs~TRzS7zjcGUXm1LzesV-3iZfE6pHAkCJFVvmRCZ~tDoHomteKpT-yW12MDxOw~2p3dRJaDw4mYclnktT0wBi0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1478733546&Signature=LUdcXMRg-Q0xogPTerEDrEjM9DzHsTg~Wj36Bk3OcVzDX-wrklBrrPGp6xujsZBku-T0yaWYXh~Cdilhr7RkyAp~RTnUP~bxx-je~MKI3khFirRHz96AQIdVM4sSFGlDil-QWikx5A3vrZmFm~VGKvJciv-~dX-~t1uD6N3b6Yw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1476020892&Signature=FWNxGPF6gb8-1kAnl-hQuS4f1MWyAsdxQmhJSoi5nw-YJ-LWOtMZdtfVzdloLOnBfzNUjlrbjKFWnyYINwdTPEET4pNYzYXHiTINVo5hojIj7eVH0tEtYI2~ibKNAXYmHnXdzGGSQPyNA~P-RICnIaRqsgvoDBdj56vawxiDmQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1466963683&Signature=HZFj626HItsrlaeaXnIIXkwVwjfi2~kDDFS26yMLrmBx5qirjLtZ~-Cu9KFrLlhKphjrVk56d8DxfgcO5dUBcG-GjWq3Lqtv8XMpZmDli~BaxJKXrpSVx1j7p8x-Fec8XC845NcjEerWdUSBM9pX3GEDyFQua-XMFsi8P4ECRAo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1477266816&Signature=UN09J06GGZqrh34t-euiNVzN3RBFVfYmp-GphUaU51mN8qYxyZZVwaSiOx6JQcAg7mfZJi~HAnakdrxAuml6bI~oOd~9A6f6nlE9wBguFr3B6MaupEAscfjh~qA7YRe8dH5GaaeQql3G7yfxjjudVLNNS2hjltXueNTZdhYCvrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://www.avirecomp.com/request.php?43

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1478402001&Signature=Mk0X2nWEwid8ZReXEHV8eWIfcfA7~Obf5tHAWO7xS5oGvai~phyT7ZBWqXKUPp93kRkRSkvN227svD-76vVVEZ01MPKhzHGh-DME6-lD7ocY-KECWkST~JKEzYPeWOKDMGRmnU5TpMFAZtg6UJPaFE87NdM5GkqnfZO6O3gsGqs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1471589162&Signature=QaWKgY4fZCcLXFG6fuaBbl6Z03LU5q6EVheRBteH~x8tPzrr7YcmoOVqhFMwCo~1uAbBY9niWs9ZYO18b1c8HFLDG9tgv-JFSsz36fEmNI7YJIeTN~4Y0ftpkn3p~CFBNYvmU6g5DCiVRHBF8NYX~KOMQnS~LG5iORWdfmbc2q0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1447066478&Signature=Y7JKQrIMR~kNt9Yfm-8c4dA1S7-o-ilCBLrlW~0GBpZgav-zdHeF1RRynHVIHhc137lY89xEeN6ewywdIoZzuOVrKfGzkiudZvSSpx~GZlfPGPJvuejCbsuVGJ7q7oOGUqS-g69n6qILRhsqCFspcHXqmDJxlTsrlmA2039Y0TM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1478396207&Signature=U5JHpKW3ilE0~-T~Qncnx8VulimIUjkL2y-9cYeJEMNv2KJjFIG7beiTRKkFopGCQg2n27t02itXNed8zneWRbPRdkHGweBvTMYEdvJ3rFXH~xauvgwFXEp85~eY1FOMhbor1AKcd~3I5Z93-ANIYtmxT-lIQw5XVVJ3OarZFBA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

https://avi-recomp.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANs2rDG86M7OZm0W2c 1FX8vGiFSwHUDQ7ZR3fNcX5WD9c0ZX6HiF9C0oZl GIRIXMDfd9ZA3S RuXo9yxm7zL1gAf4IyH8d6vn3xc7GIkGzoalAsQTsLeQRfb7Vse e2Uhp9sDnlo13xQpj9HD CTqcT92b8j5xF7Q6LgBvRZvCQ==

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1475371926&Signature=LMCSQbhVr21lykZX3Lc9woVuhozU8o-A9s7V29YKryqSdacuIdGY84TngrdvIbXU703SyudrC7sCegXYwqyQgSmiUlEnMxCCIFH8GrC5glo1YbkY7-rgwdKMCv5vTGQImGIUNMn40cah0HbDyxVJH9k6eC2jtlrQZ-OJFZ2-NBI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1480369227&Signature=LkqmglQJmC1opvF43~wMLkFpRNU2624-uFE-WwIlkE0D3DrquTbNaDP7RRPxNUSfIvh8JlkjL2~50o44YkSiOMHL4DvxYxBUrsL2xMAn2dcTQdXgeF1f7fn7PJGQLoebpMPkuFQY27BQeb3C234n7MQX5lVyyLUmhgKfdWtLdxI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1430417814&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UaOFCv0xO5imLEihspd786TjGprAGvq~vtP8EtGTbFytaSlz5qCNwakjH0gi2V-U12lHDH5192ccKoqdEkYJbcy6nMVGuarcMfK8SEqBnAYfxbpRhoJV4o6Rc2gst1XqLt8PZPLnxB7~N2pHNE-7yR2etvRrAgxbB0sBHRmzjzY_&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1472855916&Signature=FMGCD3MyT1PY~okK614LFsqg6UtFQaxBwVDdgm41CqowdjxNpxTZny009byrsGn92Nh8-3TQE3ps7SiqvVBS9L8T8p88Q36Y2KmkRmOr7B4CY-ZwS5fCpGb6ucz7hnCICiysv3BudAUkq4oKpdLv7iDAFV3cNRYpTYFOnttuv0Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1471182849&Signature=ZSZywoD4-VpAse~ADq~R0AOX7IltJhKUH94qbhwb0N73Ir87Vs8n069IjhmgOybhxg9Ga6oo9Ozh205htVwYxGT926sHa3D32t9yPmc07DQZUodIA1EKo-4nLt9ibbkNEUCFASGDwPUN5KUP1j4MHl2jdSOFwYQeQeyebTOUTUE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

http://gsf-cf.softonic.com/5b5/62f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=49869&instance=softonic_en&type=PROGRAM&Expires=1463626973&Signature=cJjAG-XIH-GNII6bKWTNVk9lHMrGA8gf1jBSpExtgnVVK65IGNRKh0cJcc~wKImBBgCLyuEDDWO1UJfI2zD9QIkOJleLYHZYCueXQSQywq87fNe3Tf-3W~PPhLkc4IruYfwz5SQFSWv6iVBCmYXWntwGabEg2PvHL-tRDN4WlIY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVI_ReComp_1.5.4_Setup.exe

Latest 30 of 36 download URLs

Scan avi_recomp_1.5.4_setup.exe - Powered by Reason Core Security