home

cubase_pro_8.5_update_installer_win.exe

Steinberg Media Technologies GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from www.newclearchuckle.com and multiple other hosts.
Publisher:
Steinberg Media Technologies GmbH  (signed and verified)

MD5:
9ec5811eeb78a64af479585d59b13660

SHA-1:
563cec6db670c1aac96a1c2eb9804e59fde64e50

SHA-256:
ea594a58bb8083f47d3b80eca9cc8020421e7ef7ec03c5e1009e518382f6b390

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:44:49 PM UTC  (today)

File size:
875.9 MB (918,412,536 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Steinberg Media Technologies GmbH

Authority:
VeriSign, Inc.

Valid from:
5/15/2013 2:00:00 AM

Valid to:
7/14/2016 1:59:59 AM

Subject:
CN=Steinberg Media Technologies GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Steinberg Media Technologies GmbH, L=Hamburg, S=Hamburg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
56353248C32F713CA07C177FDBCC308C

File PE Metadata
Compilation timestamp:
6/9/2012 3:19:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
25165824:uN2oUPsBNAKMo4dI1wEQiU2+aCV7O/JQ5tTBcEEgu:ZauoTv+aw7O/ufm

Entry address:
0xAC87

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 9F, 30, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, 8F, AB, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 24, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 24, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 0E, B1, FF, FF, C3, 56, 8B, F1, 8B, 06, 85, C0, 74, 07, 50, FF, 15, C4, 40, 41, 00, 83, 26, 00, 83, 66, 08, 00, 83, 66, 0C, 00, 5E, C3, 56, 8B, F1, 80, 7E, 04, 00, 75, 34, 68, F4, 44, 41, 00...
 
[+]

Entropy:
7.9995  (probably packed)

Code size:
73 KB (74,752 bytes)

The file cubase_pro_8.5_update_installer_win.exe has been seen being distributed by the following 3 URLs.

http://www.newclearchuckle.com/c?x=SBpKwGTWtLuprBnPt2FODrscUWkjLBStC4L77h6WKtM=&c=s7YUS1WexwV3 1hGtv47CJCeNCRSF4frZiW2RU/aQBpgC8ElE2zCG3bNabXJw9K79rfc/KJosE1Lt5/v4ynXeat35u0KuC5IS753iTtFX8iYEVGq8dsYU5HoibKizB6BZdU0r8Ya2GQVF54Fl3Bc1tarf1R/Adwmfg8 lXDMGaQ=&e=0&downloadAs=cubase.exe&fallback_url=http://cubase.en.downloadastro.com/.../?utm_source=ira&utm_medium=error_generating&utm_campaign=cubase

https://shop.steinberg.net/c/.../Cubase_Pro_8.5_Update_Installer_win.exe

http://download.steinberg.net/downloads_software/Cubase_Pro_8.5_and_Cubase_Artist_8.5/8.5.0/Update_Installer_from_8.0/.../Cubase_Pro_8.5_Update_Installer_win.exe

Scan cubase_pro_8.5_update_installer_win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.