home

avidemux_2.6.9_v2_win32.exe

The executable avidemux_2.6.9_v2_win32.exe has been detected as malware by 2 anti-virus scanners. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source.
MD5:
ead1be542d86ca3d2059a57547b4d5ef

SHA-1:
5517fda6c53fd8657984a7187fd911635a6768e2

SHA-256:
ef3d0b9296276ffd1a0ee74cfa45c0c9fbefd6f543c5837e55018699a9adaa06

Scanner detections:
2 / 68

Status:
Malware

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
5/17/2024 3:09:59 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Detection.Undefined
7.0.302.0

Reason Heuristics
Threat.Win.Reputation.IMP
16.12.4.4

File size:
13.8 MB (14,489,063 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
9/3/1996 2:20:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.24

CTPH (ssdeep):
393216:CjDJ7WLPxltaedfFiKd7E5ejeGFClBSUby14GX:CXJKLPxRd5Fz

Entry address:
0x4377

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, FF, 15, 74, C3, 42, 00, C7, 04, 24, 01, 80, 00, 00, FF, 15, 58, C4, 42, 00, 53, C7, 04, 24, 00, 00, 00, 00, FF, 15, 98, C4, 42, 00, 56, A3, 30, AD, 42, 00, C7, 04, 24, 08, 00, 00, 00, E8, 83, 3C, 00, 00, A3, 00, AE, 42, 00, 57, 8D, 85, 88, FE, FF, FF, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 01, B3, 40, 00, FF, 15, AC, C4, 42, 00, 83, EC, 14, C7, 44, 24, 04, 02, B3, 40, 00, C7...
 
[+]

Code size:
34.5 KB (35,328 bytes)

The file avidemux_2.6.9_v2_win32.exe has been seen being distributed by the following 27 URLs.

&onid=13631&oid=3001-13631_4-10829933&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/editing-production&topicbrcrm=&pid=14433037&mfgid=6307696&merid=6307696&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=a026213e4bafa45bfb9cf2c9&viewguid=hhSy0KGVtgbWVQTLklIH3V01IaJxgyXucZIm&destUrl=http://files.downloadnow.com/s/software/14/43/30/.../avidemux_2.6.9_v2_win32.exe

https://mega.nz/temporary/.../ccIEDR5D

temp:avidemux_2.6.9_v2_win32.exe

http://heanet.dl.sourceforge.net/project/avidemux/avidemux/.../avidemux_2.6.9_v2_win32.exe

http://dw.uptodown.com/dl/1446054229/.../avidemux-2-6-9-32-bit-multi-win.exe

http://dw.uptodown.com/dwn/2GIMfcjEI065A9Yef0ntH_b_ssasxwU6gkJ1SssACWpcMO5iWuIJjTehhfrmp4fLJZPUhoXX0yKPzszFRU73qjFOXF4AuvXvLEKTS0ttZrLSxewNeco1BjxoFXbiOc7X/.../

http://lb.cdn.m6web.fr/d/c/a/04627cece9488c90a6dbd69ce227a4fa/55aa7b52/soft/.../avidemux_2-6-10_fr_30172_32.exe

http://dw.uptodown.com/dwn/K8oeCt0aRyv11wvzzXLJCLNfa9vs1GBql6RktGNzHumoQ0fkmx7CB9vpJeXkkoalXunZqcrnpuot79PAZb7XtznV0A6k8oew6GSJjxKmtLUVTjf3V_YCjzKH8UGQ-b4k/.../

http://ftp-stahuj.centrum.cz/dl/64ebc6f08d007639a2ad35336923209f/55a2af98/stahuj/download/software/secured/a/avidemux/269/.../avidemux_2.6.9_v2_win32.exe

http://lb.cdn.m6web.fr/d/c/a/05421b1f80d51fd1a1f03375978de16b/55d06a14/soft/.../avidemux_2-6-10_fr_30172_32.exe

http://files.downloadnow-2.com/s/software/14/43/30/.../avidemux_2.6.9_v2_win32.exe

http://www.toucharger.com/.../?ftp=lojMytP&name=avidemux_1_20433.exe

http://download.fosshub.com/Protected/expiretime=1440504700;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9BdmlkZW11eC5odG1s/64387847edf35d117383abbe7b913a788b7392a582eeb0c0e6c3680471af563a/.../avidemux_2.6.9_v2_win32.exe

http://d210.cdn.m6web.fr/soft/.../avidemux_2-6-10_fr_30172_32.exe

http://dw.uptodown.com/dl/1433549588/.../avidemux-2-6-9-32-bit-multi-win.exe

http://dw.uptodown.com/dl/1447516036/.../avidemux-2-6-9-32-bit-multi-win.exe

http://lb.cdn.m6web.fr/d/c/a/07801fbd9ecae5369d811ceb49c1e8c2/56afe4af/soft/.../avidemux_2-6-10_fr_30172_32.exe

http://netcologne.dl.sourceforge.net/project/avidemux/avidemux/.../avidemux_2.6.9_v2_win32.exe

http://dw.uptodown.com/dwn/TkphF_aK1qPORKNwtTaJtC6nqFoTgDlu9p4FFZGEsPgmDgcm9JfdayWx5eJmwC_1-2RSwR28jD_bHa8SnECZt2nYCuA3EmOfoPwjeYWyLY2oUSzf9I3MFf0QTzhEmN4T/.../

http://www.avidemux.org/nightly/.../avidemux_2.6.9_r00_win32.exe

http://software-files-a.cnet.com/s/software/14/43/30/.../avidemux_2.6.9_v2_win32.exe

http://dw.th.uptodown.com/dl/1447508617/.../avidemux-2-6-9-32-bit-multi-win.exe

http://dw.uptodown.com/dwn/y0hYbe_7xretrMdiQY5CHbtK1gEJi5dOr6DnmUJqOSHexMdpau5CiPUiguntwvwITJp_0mhFCtO1j0aIpp3FWTv-AWNO0oh_W7ACqZFstlFlS8e6eY6U2d5gvUE-Wqtx/.../

http://lb.cdn.m6web.fr/d/c/a/ef21fe900daa1c9a0131639c2165815b/56806e56/soft/.../avidemux_2-6-10_fr_30172_32.exe

http://files.downloadnow.com/s/software/14/43/30/.../avidemux_2.6.9_v2_win32.exe

http://downloads.sourceforge.net/project/avidemux/avidemux/.../avidemux_2.6.9_v2_win32.exe

http://www.videohelp.com/.../avidemux_2.6.9_v2_win32.exe

Remove avidemux_2.6.9_v2_win32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.