home

asio4all_2_10_espanol.exe

The executable asio4all_2_10_espanol.exe has been detected as malware by 9 anti-virus scanners. The program is a setup application that uses the Nullsoft Scriptable Install System installer, however the file is not signed with an authenticode signature from a trusted source. Infected by an entry-point obscuring polymorphic file infector which will create a peer-to-peer botnet and receives URLs of additional files to download. The file has been seen being downloaded from asio4all.softonic.com.
MD5:
767ed7993a0cc66e66c140dc0cea6d25

SHA-1:
9e847f7f64d5805a6e0217d6ffef4530d72692b9

SHA-256:
491608ca412a6bb2fa497dc19e23a9e5ff8d66826076dc415d3d54d47c40508d

Scanner detections:
9 / 68

Status:
File is infected by a Virus

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
4/26/2024 11:08:33 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

avast!
Win32:SaliCode
160518-2

AVG
Win32/Sality
2015.0.4568

Dr.Web
Win32.Sector.30
9.0.1.05190

Emsisoft Anti-Malware
Win32.Sality
9.0.0.4157

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.gen2
4.6.5.141

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.217.0

Norman
Win32.Sality.3
19.05.2016 05:17:13

File size:
480.7 KB (492,240 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\asio4all_2_10_espanol.exe

File PE Metadata
Compilation timestamp:
5/3/2008 11:08:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:LvtP1Z49nhnBtFllSM72EhzHcKfpNm/HZ8HKiov0:D91+VBrPSrEhJpNYF8

Entry address:
0x30E3

Entry point:
0F, BE, C0, FF, C8, 0F, AF, FD, 88, D7, F7, C3, CD, 1E, 23, 00, 0F, BF, DA, 71, 06, 88, E6, 3B, FA, 8B, C6, 87, F2, 89, F8, 84, C5, 4F, 80, D6, E1, 2B, CD, F7, C5, 60, 38, 26, 13, F2, FE, C9, 14, 87, 88, FC, 70, 06, 69, CE, 06, 74, 3F, 0E, 68, E4, 39, 6A, 00, C7, C6, 55, B0, 74, C8, 88, ED, E8, 00, 00, 00, 00, 5E, 74, 03, 4F, 84, D8, 71, 02, 8B, ED, FF, CB, 89, C5, 81, C6, 25, 63, 03, 00, FF, C9, 81, C6, FA, 03, 00, 00, F2, 80, ED, 27, 13, C5, 69, C6, 09, B8, 65, 20, 8B, FB, 8D, 0D, 1E, 17, 6A, E8, 85, D3...
 
[+]

Code size:
23 KB (23,552 bytes)

The file asio4all_2_10_espanol.exe has been seen being distributed by the following URL.

http://asio4all.softonic.com/.../trmsvRChbxdrflJq3ZIylWt36jz83JSnj9jkYFVrrCvO HzEVljDbYYLpanMYloCFqdPizhcqfSf5ULjUhOvxRLbofz0qBmchERszqAs5g2BRVEBB7kFi8QUwQ3uMvKA5FZO4p6XkVoycZi71Z2lrp xfcR8s1KrFJego4WelTjZCxD26IqDdzJdJ8h 0lbvAg==

Remove asio4all_2_10_espanol.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.