home

avigenerator2.0_eng_v2.0.0.8_3008_20130428.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from public.boxcloud.com and multiple other hosts.
MD5:
697107d092b0a78fc4143bc5308a8773

SHA-1:
62406f2ff62cdb60784693e5e99840d6665d1933

SHA-256:
6eae82c9dc708e5a01282b80816f48d2bdff7537e8022b8f3e19351d3231be7e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:43:41 AM UTC  (today)

File size:
10 MB (10,478,670 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:8AoYOU6ZdedfxmdSkriN+yQTkBxRNLQA1cx7FtW++Nhxv56X/K3dAgtFNgS+c:NWU6/OfXkraBNLeW++nnM/K+Mec

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9977

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file avigenerator2.0_eng_v2.0.0.8_3008_20130428.exe has been seen being distributed by the following 4 URLs.

https://public.boxcloud.com/d/.../mhGpFBtUSolXvexsZ7WiO419_Nvu6duG9DPCbcRc4ZTyerBKZgNQpcOvEdSf-96EsLIZGFK_BGBjx-zMl6aWxq1xWZ4Nhp_6CUSQTU6mGnzjNOBeZJujGWD61cb0de054xK1Xm_7vCfoa9lfVKVKk6q3gOAXH0JBsbxZEMSdAUK0zZYFpBjNe5KC1--fmFxmlDzw87yXAvzWVfYmAZgXv4-2ycu-VXrlT7DIHsXl6wOLammIOGKbKRVvZOWM_TNgqwAteUh8P7S_yxSlOeFTr121GPQys0Y81xRjP5KXFjgIjgLh0oSNhq_EK6lN33vumbdM3-snVMJYaoqh-NPDHwx-hJ1rq5BqlU4u_5OEpiIOclZ2wHbRor7V4kC5k8x-WBJUkPbOd0GDq4lhfURQ7OOGejs1zo0oE3700X7jygaUBakvv9VTnaNFQEEI5Hkt-SEWkC0EQfd_3fPQIGsayAXPjB-0_loBnG_LF1nJb5FwUkkseTYHCdYERgD10tWbJ_5EZjseg9oP1hsvooCRqVTBm5yb8ouZYs1V0Ix6BNrC1dwi-svlots-mDG-nitIDE6LomFGaGNQjbri0NxyhJep2F85Av1VEuS-sI9hqoP_0ajJhICdhYk8XP_OnoeO6r-T7u_6jkAVjc7tLb7YX7IEQzebKu4d2NzDmd12cUxFp_768ApUH5bt7NplABvJK_1LjzlqLarDKMoeESma-3G485EyZ_wBl1I2PHaLwAcJ-jUEtx3ijCR83WsV7L0y79EIxOSr_4E8e3gEGj1B4D5Zaev6nhp3tr8nS3uLLVfVO3IYQHoUY5LZkvnI9_4_ZF-F8JKdI7XG77fILiYITtYcqlPh8uuVWxQE3GIaLWTBvA3EmMbKYquGG9PyzJjtNhjuWXT-8Dw7IcU2Q8Z6jQM8e7V3FkylRn-PIHaUzW4sG933Zeqbnl2ZNHcx6RXMnryZrt3o

https://dl.boxcloud.com/d/.../ZG24Gg-rSsLx0hjKKiWmNGIY6tkQsWbAu2PXe54mzpBx6YQQAE_ZZkT5IDoZCbPL_Cw_low-I4DdosWwG0IlkUvKtAcZLI12D4_3gm7UzWv7RfVs4Kb3Hwavl2thLAOHhgxlTQSVyByWLFUyubyIzYmc_pas2N3xTEOap57npeaZANaGyVR_cisaAC_uEV2oJepBpHQG2i9ywcEsf6yAPGanxw8Xdy55u5HWmwofRovJNjjylsZpkDo4sltSP9TkgAOgiIu_zupG3062dPzG5DqrMOU1hU6xk1QuGWhLS84TAOZkcvpAiQbNSYMuWZJlSkrw6do9SRpI4usbQP4I4LzMC9MK3lhDCKvxpynNpS82p1E-CfLl0mbwCCAUXV_EF56HjTJ3Sm8xg8tCbX68X5suWnm3DDNkOScGeErKO7CiBVZaV84GbaTkZGHBsFvPYZPT7Dm9sVIK9-9ZEMmQ-j9rXSTPWCih59VROLSopziLiOCI4cK2-ZBD8iFkRMsj-qbyJR4dUieoJDclbplme6hH0OPTEn4wQYHAYg1Z0SkECVx-I0LblfCFZXwJxafDcNUCTs1PSRJpAlRITE9KBB2RMDqebuKs-DHW6Bot49TwiTovRuH6a2WaRRa3Q1E6LYHQvGbslTGaF7CwZ7M0bmklQDsM2Ia5gP7NK8W7UIxMgTJt4wEst187ik88NDAx6Bhu3gr20WOG_7HfM52qyEMm0EIl_y4yRRpEQBSirc1n8Ch0fa0NThKdEzZR21KiXd1l5HAMyqdNh5SckopqKRZ0BTWHIKTV8HSnjjlU9jex9ZZFaGIM4fZTyCONLNXqW6vLfPsFDiP2SQ0LDy6l7i4BM8lDHCkFC2BJRKVkCPxqfeamKcCqsYIjssFWUJQxXgdZg-QWgOILC9fCyQC4HIf-PskNVN6FCFGvScQknhPzFI_iMd384uutZqLafMlBsk4bBEpViZ9S

https://dl.boxcloud.com/d/.../8LgCADH-I183cE9c_mJV9aoxANG8Sp42vDvkGZXUUuECFj8hKw9cYO-wkXpFIgsnJEeBSZKwW4kGtfUF58-tYaavr7NXdvZ8ScI7zocp8UYLuWaoCYwqvFRp3jOIZ0LcWa3wneZsk7u4HtKASm5nLYUNNHXnYAOvN286WMogq8WQo8BzX8KWR6VF1ama1C3nJ0WHpC3vTxvgJLstLXn_6gVJXjfq5sqpren9Kg3FFkLfZ3RVG6VhsJ-bjhdQgDkJsG2bMo48gkK2TpFb4tv6vQR53ALgEAvMeN3PzLyDnwumt08TubCldKfAEA0G-x--Wyp0jSlh9oQtIHXSiELCOUu4geLJt2Mg57O_gtZU1CInGlOHiEhpLdO1fgZX5hHjFjrWrtG0aCWPtoBTfRZtBtJyRMBsprSFBZOTouc11P6wHCdu4q9J8hivaAyjB-eRTnmMQRm15qTTRD3aBENcuYdjZ_HQvPfIW1yZvL_JJ7buTPt__5RF3C8Nawf_zrO_jllux7HhShORVt10VP6ruezP_F8dLaedCNOP8lNAYqZ2sHT9Xp4t6SNmWIfEn6b-7U90nWUPxJCLnAAsEaHJvW5vF3wwbR1FVQv1J6UndNE0JTkSknyjS6sOETp5AETBvhwOZxGEGz1rJENFLazXH3XLJlurpLF6svgV1ZZf4WhbJwL4zVhdttJEAgtRdwTf3wMGRyIy5VEIooN7Hn-weIv3XhFOA07UmsXOerIQBGUqviISfLT2_Iqq6AorVMhqAtc3WljKUdQLKPZQ-6AgcCXtwY09vj-edqm38z_P9Jm5ZuCNzSSYtIV5KI3bEzwC7bXdIeZhTlTijgPDZHS2Ii7UiMvGH8bV7bnHe48sS9Ig2sOzt15j1uO0JqYx61cNhItcArgEJTVhjRhQHLexMv-Vc9_rRFWuyOYDHR40qLWxKADDN88QS18KWKfFRnvsN0sc7-Ug2HNM

https://ferrismarketing.app.box.com/index.php?rm=box_download_shared_file&shared_name=1070pacdqif6eynfbyvjezruuv86cafu&file_id=f_25868830621

Scan avigenerator2.0_eng_v2.0.0.8_3008_20130428.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.