home

avisub23.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.cdrinfo.pl and multiple other hosts.
MD5:
eae533a83a0655a60f427c22e20aeab5

SHA-1:
072acdbd5096290859f2342fc483862e5cc5496c

SHA-256:
3bbc89c72ff667edbd61bd82a0e2463fa998b67c30718c4e06a81e477cb9e92f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 11:43:52 PM UTC  (a few moments ago)

File size:
1.7 MB (1,766,673 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\Music folder\software programs\avisub23.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:0DIPbI+L94QPahFbC6oD6MeXTGDOKZUo0UnkrS5fwQ3:XVRiFbC6i6PXCD1/fB3

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 1A, 79, F5, 3E, 06, B2, 60, B7, 77, F4, 1A, 00, 00, 50, 1B, 00, 0A, 00, 00, 00, 41, 76, 69, 53, 75, 62, 2E, 65, 78, 65, EC, 9A, 67, 50, 53, 5D, 1A, C7, D3, 13, 42, 48, 02, 84, 1E, 20, 20, 45, 7A, 53, 5A, 28, 11, 10, 10, 29, A1, 87, 0E, 0A, 08, 88, C0, 0B, 09, F0, 4A, 49, 20, 28, 84, 2B, 8A, DD, B5, 82, BD, 20, A2, AB, 82, A0, 10, 88, D4, 45, 05, 45, 01, 41, 01, 51, 04, 03, 18, 15, 21, 42, E0, AE, EE, CE, CE, CE, EE, 7E, D8, D9, 2F, 3B, FB, 61, FF, 73, 67, 7E, F7, 9C...
 
[+]

Entropy:
7.9989  (probably packed)

The file avisub23.exe has been seen being distributed by the following 2 URLs.

http://www.cdrinfo.pl/download.php?filename=avisub23.exe&id=9125180502&baza=soft

http://www.videohelp.com/.../avisub23.exe

Scan avisub23.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.