home

aswMBR.exe

avast! Antirootkit

AVAST Software

Publisher:
AVAST Software

Product:
avast! Antirootkit

Version:
0, 9, 9, 1771

MD5:
aedb6aa9598337da300942def6b5efc5

SHA-1:
5203462c9e1a600682aedf312e89f35cb1c7fe9b

SHA-256:
10a04071d36ac9a81cce1555b69fbf1a3d23faf09ae1f25261701ec208e2770e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/21/2024 2:18:44 AM UTC  (today)

File size:
4.5 MB (4,745,728 bytes)

Product version:
0, 9, 9, 1771

Copyright:
Copyright (c) 2010 AVAST Software. All rights reserved.

Original file name:
aswMBR.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\aswmbr.exe

File PE Metadata
Compilation timestamp:
3/18/2013 7:00:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:HokUjK4iMSSay0ATJm3surxvcYopSnxOe+K:IkoK4DTIcMnxOe

Entry address:
0x49B1D

Entry point:
E8, 84, B8, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 04, 0A, 48, 00, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, 4C, B9, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 2A, F3, A5, FF, 24, 95, A4, 9C, 44, 00, 90, 8B, C7, BA, 03, 00, 00, 00, 83, E9...
 
[+]

Entropy:
6.4609

Code size:
434.5 KB (444,928 bytes)

The file aswMBR.exe has been discovered within the following program.

Free PDF to Word Converter 1.3  by Free-PDF-to-Word.com
Publisher's description - “Free PDF to Word Converter can help you convert PDF file to Word doc easily to edit and reuse. Totally Free PDF to Word Converter. Easy and free pdf to word freeware, convert pdf file to word doc file. The world's best Freeware to convert pdf to word.”
www.Free-PDF-to-Word.com
26% remove it
 
Powered by Should I Remove It?

The file aswMBR.exe has been seen being distributed by the following 5 URLs.

http://files.downloadnow.com/s/software/13/11/03/.../aswMBR.exe

http://sb/.../12. aswMBR.exe

http://software-files-a.cnet.com/s/software/13/11/03/.../aswMBR.exe

http://files.avast.com/files/.../aswmbr.exe

http://public.avast.com/.../aswMBR.exe

Scan aswMBR.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.