home

avast! free antivirus-10.4.2233.exe

Neseremad

AgileMax (New Media Holdings Ltd.)

The application avast! free antivirus-10.4.2233.exe, “Neseremad Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download the free AVAST Antivirus but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
AgileMax (New Media Holdings Ltd.)  (signed and verified)

Product:
Neseremad

Description:
Neseremad Setup

Version:
1.7.5.7

MD5:
a706f09b2e55a98e375aff2c9e34f784

SHA-1:
6f0ee5e64d85214fa565183ee7627437577f8d25

SHA-256:
70e17cb1d7f0842123b423e2cfcabe61b963bbd34eb59b7b380153a891206ae4

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/5/2024 12:58:47 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH (M)
16.8.7.5

File size:
912.8 KB (934,656 bytes)

Product version:
2.3.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\avast! free antivirus-10.4.2233.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:04:31 AM

Valid to:
10/30/2016 12:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:aiQPdiGeCoNbqaE5OfPLCaIZi7Y7TsAjKLll7u:zu3e1NmajTI4A4AG5

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9339

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file avast! free antivirus-10.4.2233.exe has been seen being distributed by the following 2 URLs.

http://www.giftvaultbinaries.com/Aby6lNWRy73xQkmMSawlj2fRx78EoavKij1fu8XkPfn7VmBEBmqYhPhJVMPuy1_S37 8G1aTIz__PS_EkGXSa5ne7BBPgJRdvwClD4sel1x498oyWuGGeBm3uGlY67eGMvX3vU_COJTROWElw SuNVmYUgPbFsfS_ly41YUx8cX_t9_wYbzF1PTcb9vJZmQDwyRIeSTD18lqknOVcphhDZJ9uQNM2K5OxGrI_eOBdxxK8b jT6zPKHuNB8Yrv0L3h_P2YSlEiWEwRHxSDc LRKp8zvtsI7vYQDPwfuSZM_yL5aqQgaE_FvQsmf4GcJXpic8mrK6UU0nxquLBAW23gnRmzb66Q8B n6 FWga080pdrJnCTkkya0zIgtI3NDaIC6vXqQHl7ZDX3335Aec013Ia88TmVSMK2SD_qbol1ussR7KIyqq t7_3VKpOb8Mx0G7g7eFUhYbkzF4WZEt_84rqx9jaTVIGgeLbN91A50v8jl0mhdA=-G10AAES3eV5qWcfTdckCiZ6ILMgpB6ytLQkL7Ho kNxzmON1Sdj0jVnywRkIVjZZAdo9Zl3DIKRNJAJmk1vDunPSLwu_b1NOXFm1FPbv

http://www.giftvaultbinaries.com/oH3rN9kTVnztqYChJXNcyN2Wl31gRIyelswlazo0mN2sA4klXxdiFca9OmzfzOl0EMZS4WD2Ushb23GqLMBwofuFXr71Ij_qt6x7EUVdlRlVsP_CD kZjRYFx9LzYIZWmztjXxlKixbaLbI478XbZUA6zPVsvJyfkPx7aZ51FQ1RAzAxy2imDyqSHPZnLxGHkfNBNoL7TUSFPIqLAU6aM57LfZhXM3kwDwYfF 43GkdEPZpf4W8Cv9sbFhobenKFTdvsO0QVYNM81avlx9lbKLdBMNuu 181h9OMGCEiK2mpdzx6XuouO7UdAVlcNzR r1btTGpp69ZZqzJ5dJO60Behew0BdXl1hsCkJ4Fw3J99DgcyoY97XGAFKiU9UP1PTNqeI6Xiju6THksjl9iQspfAEj3VGL1o1ed0Aomna_6WnyTqj7dKKRcKPYn3YXOFMq4bnbYNqcHm3rOnPyucvLQnu th_4PJZaFXO4YqPp7xi 0RNBA=-G10AAES3eV5qWcfTdckCiZ6ILMgpB6ytLQkL7Ho kNxzmON1Sdj0jVnywRkIVjZZAdo9Zl3DIKRNJAJmk1vDunPSLwu_b1NOXFm1FPbv

Remove avast! free antivirus-10.4.2233.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.