home

Auvis.exe

Vypress Auvis

VyPRESS Research, LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Auvis’.
Publisher:
VyPRESS Research, LLC  (signed and verified)

Product:
Vypress Auvis

Version:
3, 0, 0, 1

MD5:
872530befeb74860c3b6e4834a2ccc29

SHA-1:
960c6071a63e17e97fc1635e06c33766814a464a

SHA-256:
f12b3da9da2e5f6984e7226640887a08397fbb285a02f8698e4886bacd625590

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 2:16:22 AM UTC  (today)

File size:
220.7 KB (226,016 bytes)

Product version:
3, 0, 0, 0

Copyright:
Copyright ©1998-2004 VyPRESS Research, LLC.

Original file name:
Auvis.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\vypress auvis\auvis.exe

Digital Signature
Signed by:
VyPRESS Research, LLC

Authority:
VeriSign, Inc.

Valid from:
1/13/2004 7:00:00 PM

Valid to:
1/13/2005 6:59:59 PM

Subject:
CN="VyPRESS Research, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="VyPRESS Research, LLC", L=Lewes, S=Delaware, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:
7DDA2B162C289BC02BD769A018CA4103

File PE Metadata
Compilation timestamp:
10/21/2004 2:51:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
3072:FW9s6MbFTfBZFqHXo1V51quOntGJqYH3maE1j9hlkCalt+uNiL:E9sFbFTwHXs/quawJMaEj9ICa+7

Entry address:
0x1A62A

Entry point:
6A, 60, 68, C8, 35, 42, 00, E8, 62, 24, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 6E, 38, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, C4, 31, 42, 00, 8B, 4E, 10, 89, 0D, 68, A4, 42, 00, 8B, 46, 04, A3, 74, A4, 42, 00, 8B, 56, 08, 89, 15, 78, A4, 42, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 6C, A4, 42, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 6C, A4, 42, 00, C1, E0, 08, 03, C2, A3, 70, A4, 42, 00, 33, F6, 56, 8B, 3D, C4, 30, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.3765

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
134 KB (137,216 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Auvis

Command:
"C:\Program Files\vypress auvis\auvis.exe" \min


Scan Auvis.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.