vsoconvertxtodvd5_setup.exe

VSO-SOFTWARE

This is a setup and installation application. The file has been seen being downloaded from doc-14-40-docs.googleusercontent.com and multiple other hosts.
Publisher:
VSO-Software   (signed by VSO-SOFTWARE)

Version:
5.0.0.45

MD5:
a6df4a9d5d89321c7d0d901b730ee87b

SHA-1:
2d03ff3ea5c7174a748503cccb46d5f98857dd93

SHA-256:
888ea29791d58a674ae0fbdc636dcc4b820f7df773ed3e975979fe4c6e39577d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:27:26 PM UTC  (today)

File size:
26.6 MB (27,940,440 bytes)

Product version:
5.0.0.45

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
3/22/2012 6:00:00 PM

Valid to:
5/22/2015 5:59:59 PM

Subject:
CN=VSO-SOFTWARE, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VSO-SOFTWARE, S=TOULOUSE, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
71CE554954ADC837C1FD05FD4FB92F24

File PE Metadata
Compilation timestamp:
10/9/2012 2:48:22 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:q8m2QYrT9HIs/+zPtgqsUXI8b/+VcOR1oRam2HlHjxBL4:qEQmOA+htJXI87+2OR1o0m2t7E

Entry address:
0xF3BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 64, ED, 40, 00, E8, E8, 71, FF, FF, 33, C0, 55, 68, 89, FA, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 45, FA, 40, 00, 64, FF, 32, 64, 89, 22, A1, 48, 3B, 41, 00, E8, BE, F7, FF, FF, E8, 65, F3, FF, FF, 8D, 55, EC, 33, C0, E8, F7, C3, FF, FF, 8B, 55, EC, B8, 4C, 66, 41, 00, E8, 6A, 58, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 4C, 66, 41, 00, B2, 01...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

Code size:
59 KB (60,416 bytes)

The file vsoconvertxtodvd5_setup.exe has been seen being distributed by the following 16 URLs.

https://doc-14-40-docs.googleusercontent.com/docs/securesc/ge2r2ss74pcmafajonkoq10bmtpkaeun/bup25so2b5q0dn40drahm14ejlqr6e7c/1446242400000/.../00715361076014778997/0ByUAtqfrvjMQbWhSSXVlc1lzcU0?e=download

https://secure.avangate.com/affiliate.php?ACCOUNT=VSOSOFT&AFFILIATE=7887&PATH=http://.../download_product_direct.php?product=convertxtodvd

http://www.afterdawn.com/software/general/.../vso_divxtodvd?mirror_id=0&version_id=59181&software_id=739

Scan vsoconvertxtodvd5_setup.exe - Powered by Reason Core Security