» avast-antivirus.exe
Overview
Analysis
File Details
Downloads (33)

avast-antivirus.exe

AVAST Software Security

AVAST Software

This is a setup and installation application. The file has been seen being downloaded from ftp-stahuj.centrum.cz and multiple other hosts.

File name:

avast-antivirus.exe

Publisher:

AVAST Software (signed and verified)

Product:

AVAST Software Security

Description:

AVAST Software Setup Engine

Version:

7.0.1456.418

MD5:

a2156834b1ba6a0d8064111597b415ac

SHA-1:

bf7fbb174017adf518bd8f81a7559b117865aba1

SHA-256:

1af7046c146ac3e1538319c1e6a55f5fd397d7c0b1de25c20f7dbc82a21b4bf9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/3/2024 6:00:30 PM UTC (today)

File size:

85.2 MB (89,340,632 bytes)

Product version:

7.0.1456.418

Original file name:

setup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\software\avast-antivirus.exe

Digital Signature

Signed by:

AVAST Software

Authority:

VeriSign, Inc.

Valid from:

1/30/2011 7:00:00 PM

Valid to:

1/30/2014 6:59:59 PM

Subject:

CN=AVAST Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AVAST Software, L=Praha 4, S=Praha, C=CZ

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0DD6D671FE0364D43B632131417E7B3F

File PE Metadata

Compilation timestamp:

7/3/2012 12:20:33 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1572864:t9bVyaWhsbmbWx0KEzupRR28ktKihEhwHot1A0U6Ahrxs:t9pJCbw02Q8PiahwIBvA9xs

Entry address:

0xA90750

Entry point:

60, BE, 00, D0, 9A, 00, 8D, BE, 00, 40, A5, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11... 
[+]

Entropy:

7.9986

Packer / compiler:

UPX 2.90LZMA]

Code size:

4.9 MB (5,128,192 bytes)

The file avast-antivirus.exe has been seen being distributed by the following 33 URLs.

http://ftp-stahuj.centrum.cz/dl/59e56f40a52ad46dcc5c0580540d50b0/50150f91/stahuj/download/software/secured/a/.../avast_free_antivirus_setup.exe

http://dw2.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1342544620&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://ftp-stahuj.centrum.cz/dl/e0c54bb5c156133d3f0026a88fd4c348/4ff950b3/stahuj/download/software/secured/a/.../avast_free_antivirus_setup.exe

http://sd-cf.softonic.com/18000/18007/.../avast_free_antivirus_setup.exe

https://download-6fdhqjkth2fzryo88z9d8vd34.wetransfer.com/download/?unique=28fe66365d3fcee043b3593546e7efb120150830160635&profile=wetransfer-eu1&filename=avast! Antivirus Gratuit.exe&expiration=1440955512&escaped=false&signature=55e9c825fd5bfa660b2cbbe6ccb7c7e254b4b32f99ff0c17eefe0f06c1791855&callback={"formdata":{"action":"https://www.wetransfer.com/api/v1/transfers/28fe66365d3fcee043b3593546e7efb120150830160635/.../2f8f3fbe5e7191b0b775d44c07e7e12f20150830160635"},"form":{"status":["param","status"],"download_id":"1013457819"}}

http://s10742.chomikuj.pl/File.aspx?e=fO1-v2Ndk_fa7xkeA1wBDv3iwIfWFP3-iyKrTRe4PUpGMW9I6i-MrFLkquPc7bE1mIM1nM-ocENlB4ffhcPJo9P-jOq3TGG7DUwBHozvXs-bOXWm1xXpiXnj2UNbBsbS5S5Cpg5qMZMC9WivkfqEqIvmk8hXyY6zaX0LQDt7Rdcio3MUILbatQwirUQJuoCybKC-8Zsw6sWrNdVAi9pztg&pv=2

http://ftp-stahuj.centrum.cz/dl/4635a5d12d8ab081ae8533c470be40d2/500af616/stahuj/download/software/secured/a/.../avast_free_antivirus_setup.exe

http://aavg.net:182/d/.../avast_free_antivirus_setup.exe

http://www.avast-antivirus.es/.../avast_free_antivirus_setup.exe

http://dl.cdn.chip.de/downloads/.../avast_free_antivirus_setup701456.exe

http://dlh.softportal.com/b1/4/3/.../avast_free_antivirus_setup.exe

http://dw1.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1344474311&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://dl11.download.fi/download/cc3fb781cb5f414ab0c4f5e4fd469d63/50a425a1/.../avast_free_antivirus_setup_7.0.1456_FI.exe

http://dw1.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1342550060&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://dw1.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1342030388&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://ftp-stahuj.centrum.cz/dl/1ada6dd423c1ded684a7ea65fa4e294d/4ff9946a/stahuj/download/software/secured/a/.../avast_free_antivirus_setup.exe

http://sd-cf.softonic.it/18000/18007/.../avast_free_antivirus_setup_7.0.1456.418.exe

http://download310.avast.com/.../setup_av_free.exe

http://sd-cf.softonic.com/18000/18007/.../avast_free_antivirus_setup.exe

https://files01.secureserver.net/public_file_binary.php?page_action=download_file&hash=1sd9Z2vowhxkyQ

http://sd-cf.softonic.fr/18000/18007/.../avast_free_antivirus_setup.exe

http://sd-cf.softonic.de/18000/18007/.../avast_free_antivirus_setup.exe

http://dw2.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1341607833&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://files.avast.com/.../setup_av_free.exe

http://sd-cf.softonic.com/18000/18007/.../avast_free_antivirus_setup.exe

http://ftp01net.telechargement.fr/avast_free_antivirus_setup.exe

http://dw2.html.it/index.php?softname=avast_free_antivirus_setup.exe&code=1343588038&q=ODIyMHxhdmFzdC1mcmVlLWFudGl2aXJ1cw==

http://sd-cf.en.softonic.com/18000/18007/.../avast_free_antivirus_setup.exe

http://universal-downloader.softonic.jp/18000/18007/.../avast_free_antivirus_setup.exe

http://files.avast.com/.../avast_free_antivirus_setup.exe

Latest 30 of 33 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.