home

aviaddxsubs.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dc612.4shared.com.
MD5:
b45dfbcf9d30d24bd98ff51a52391429

SHA-1:
9d5e21d72c4849ef9bba6943a5a06a72d1c5a4fb

SHA-256:
3d8721eab0c80091171a9db158e01ab07c1a560f35084a31dbbd2d92c70170e2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:20:30 PM UTC  (today)

File size:
175 KB (179,200 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\aviaddxsub\aviaddxsubs.exe

File PE Metadata
Compilation timestamp:
2/9/2008 8:36:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:wxpT1zLLvYQjy+/0+hWmIO1V0aBl5JFJNTdmh/BapWK0A:wxpZnYQjy+/0+jGaBl5JFPTdmh/BapWI

Entry address:
0x40AC

Entry point:
55, 8B, EC, 83, C4, F0, B8, F4, 3B, 40, 00, E8, EC, F8, FF, FF, E8, BF, F9, FF, FF, 84, C0, 74, 07, E8, CA, FA, FF, FF, EB, 13, 6A, 00, 68, E4, 40, 40, 00, 68, EC, 40, 40, 00, 6A, 00, E8, 55, F9, FF, FF, E8, 9C, F5, FF, FF, 45, 72, 72, 6F, 72, 00, 00, 00, 63, 61, 6C, 63, 6C, 69, 62, 2E, 64, 6C, 6C, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 66, 6F, 75, 6E, 64, 2F, 6C, 6F, 61, 64, 65, 64, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
12 KB (12,288 bytes)

The file aviaddxsubs.exe has been seen being distributed by the following URL.

http://dc612.4shared.com/download/.../AVIAddXSubs.exe

Scan aviaddxsubs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.