2667877_stp.exe

avast! Antivirus

AVAST Software a.s.

This is a setup and installation application.
Publisher:
AVAST Software  (signed by AVAST Software a.s.)

Product:
avast! Antivirus

Description:
avast! Antivirus Installer

Version:
9.0.2006.159

MD5:
24f3708cf5504c67f1cb2685c7bbad78

SHA-1:
8df818ddf90b945d228435edcc54be83d8c9820b

SHA-256:
a9bf9ae875189018e2bc239b21f092e958fef72cd75d64c9b1c9d857af885049

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 7:26:29 PM UTC  (today)

File size:
81.5 MB (85,444,160 bytes)

Product version:
9.0.2006.159

Copyright:
Copyright (c) 2013 AVAST Software

Original file name:
SfxInst.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\2667877_stp.exe

Digital Signature
Authority:
DigiCert Inc

Valid from:
7/12/2013 7:00:00 AM

Valid to:
9/14/2016 7:00:00 PM

Subject:
CN=AVAST Software a.s., O=AVAST Software a.s., L=Praha 4, C=CZ

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0EF5ECA7BD31CFC3A7F8E6259B423359

File PE Metadata
Compilation timestamp:
10/14/2013 11:58:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:Jvtp/YrBtocucdwXfYL43FALYdbBvg4vWidUFC8MDsmD0gxHGoe:JtNMTocuakAL6AcpOVidUw8gB0gwb

Entry address:
0x44DF3

Entry point:
E8, 47, C6, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 6C, 24, 47, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 88, 02, 47, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63...
 
[+]

Code size:
443.5 KB (454,144 bytes)

The file 2667877_stp.exe has been discovered within the following program.

Panda Antivirus Pro 2015  by Panda Security
www.pandasecurity.com/redirector/?app=Home&prod=114&lang=eng&custom=173956
About 6% of users remove it
 
Powered by Should I Remove It?

The file 2667877_stp.exe has been seen being distributed by the following 50 URLs.

chrome-extension://bigefpfhnfcobdlfbedofhhaibnlghod/persistent/.../cBxlDAxD

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131025125402&nva=20131026005502&token=0e80bd3621189731684c3&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131028113320&nva=20131028233420&token=0b346eade55112994ab8a&id_file=18007&channel=WEB&instance=softonic_pl&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131026053444&nva=20131026173544&token=099d52dc6a8350b56bd50&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131026223221&nva=20131027103321&token=09a70504ff48b340d816a&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://s6417.chomikuj.pl/File.aspx?e=kqmKbZu-BrhoXFXjrbiTca_r2u6Dq1xvsY7cStOpbt-rOg-zAAIL0-T_bIU8ryFvW9vdiCgMLVhAdzCCLUkvH3gFDF8mFRZCwspnvl2UXqHsa3yvzhhA1clr9tspU1ySg-QuxqldlWFPvXqzMYfXzWe3F6u0zYPwtV52J-4jU48&pv=2

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131023151703&nva=20131024031803&token=0c4ce758c5f66ee483032&id_file=18007&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://gsf-cf.softonic.com//8df/818/.../file?id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&Expires=1382664409&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=V8av6raz7Os6OeKqVKCU63GJgBVdAaGQ0imaRkY6yyIRwagDd3KYP4FctvYqoMEnArf~QOujTKySpq6nm6Jyx31TItK~PEjHx2rSkspn3GZSoBxw0rba-DLR4iiQ-100vfFoFUa6HUisW7Yb57~q6c4iUjmga9RtBFFZ6V597rk_&filename=avast_free_antivirus_setup.exe

http://gsf-cf.softonic.com//8df/818/.../file?id_file=18007&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&Expires=1382734534&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Zw7DXTD5S777tRzCXcG3mdEuJpYNZmoR0M3HcSBZdL2i2aW0lcgtsPqQRSaUd3cpnfVZQjHaO-PMkXvUTqImaZhzVDa64~x5Xgmxs527SYtXLl9hWm0TtnZOk3QSLgBlV6d3TjVe3yh4F7hlu4Prf~w6dViPnMRvCztX6ndS~Fw_&filename=avast_free_antivirus_setup.exe

http://fra-7m15-stor01.uploaded.net/.../9a6e52fe-cae2-4353-b075-57548298e156

https://dl-web.dropbox.com/get/Public/.../avast_free_antivirus_setup.exe

temp:avast_free_antivirus_setup.exe

http://sd-cf.softonic.com/18000/18007/.../avast_free_antivirus_setup.exe

https://mega.nz/persistent/.../cBxlDAxD

https://www.dropbox.com/pri/.../avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131030084158&nva=20131030204258&token=0bf87900ad908f537b0ef&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

https://mega.nz/temporary/.../pFIH2JCY

https://mega.nz/temporary/.../cBxlDAxD

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131031215015&nva=20131101095115&token=09929d2da834eba4dc27a&id_file=18007&channel=WEB&instance=softonic_br&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131031180140&nva=20131101060240&token=0916650420dbd92fdd90f&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

http://global-shared-files-l3.softonic.com/8df/818/.../file?nvb=20131103191759&nva=20131104071859&token=077a18dfa0b52712afc2d&id_file=18007&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=yes&SD_used=0&filename=avast_free_antivirus_setup.exe

Latest 30 of 50 download URLs

Scan 2667877_stp.exe - Powered by Reason Core Security