home

avast! home edition 4.8.exe

Software

Ringier Axel Springer Polska Sp z o.o.

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application avast! home edition 4.8.exe, “Software Setup ” by Ringier Axel Springer Polska Sp z o.o has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. With this installer, users are expecting to download the free AVAST Antivirus but before that occurs they may be presented with additional offers, mostly potentially unwanted software or adware.
Publisher:
Generic Installer   (signed by Ringier Axel Springer Polska Sp z o.o.)

Product:
Software

Description:
Software Setup

MD5:
64d2906fd4c4600c1cd1d7a13c05994c

SHA-1:
0708efd1a54437cb24373f12e291c72f1f4e1991

SHA-256:
033c382c03f9959f8844102b828205058499369fb0735e5f1798808281072f4e

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/27/2024 1:43:45 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore (M)
16.8.10.9

File size:
671.9 KB (688,024 bytes)

Product version:
2.0.9

Copyright:
Program generic

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\avast! home edition 4.8.exe

Digital Signature
Signed by:
Ringier Axel Springer Polska Sp z o.o.

Authority:
GlobalSign nv-sa

Valid from:
12/2/2014 3:08:00 PM

Valid to:
12/3/2015 3:08:00 PM

Subject:
CN=Ringier Axel Springer Polska Sp z o.o., O=Ringier Axel Springer Polska Sp z o.o., L=Warszawa, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112158083A5E821B7A3E9A1253B62099C808

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:c5wkpmrF3Wq9qPPh/CCBS/wMvhlG0mjAAV0b9a6fhZvYaJC8fK0cYsEbO:cuksZ3c3F0/wMjnmr/6ZZvYaJt2Eq

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file avast! home edition 4.8.exe has been seen being distributed by the following URL.

http://cdn.whitestorageocean.com/?ic_user_id=963&key=ju5zBTKhn3JgWQ4pXBWBcuxwMgHU/SbPs9LEHKJ6AaVjZbg13MgJO9X7ju7creV4dWgggv2 hxgNBQTSYw9wFpsN2YNPoPyr3RRPki5IR4gBpGl/BjyCpBCRrBUj6c1j1UxBctOaj1NwD/RZYbG5mTe9onV5NlufYW loxlRNW7p07rKmLobB4aZuBLKh3bhhXTJA0ypHEI5cfItdMw2Wiq9jZcMeIIazmGhDWzStBBzFfKtkPEJyV4mpBw/DSfO29ZvpXNq/wgU /TrghiREC3fW0aLVtdbQqtbtmyoqT4YZilfOECvj9U0HLKQBtrFNkgFxYLx6j/cNxfCzJmabg==&data= OC8pKVgrKQBioCkrvC3yLIIU8Ckt4CS28jSF4aoUJ9r9xi2sBymKRBX2W3WoUrw9CpvtiFpIznbtxfvDYTEvbzaJbePv06O53MW8BSlHKUY/9CX KvFMgY2KT8Aw28jp65jtyzS1pQtLH/5dRhX3pz8Yz/vzMc rWDC0Dhlfe0Hbs8YHR/TFn KMsKSmUzNDG1JbhJynLVR1lWVkNG7k5dqxRdP5zi1DFpLjgVqX1mp99qTARlsMYDjiz9SKEn08n674RXW7WdopWq SIz/7PyVKBbI3DNOZXm4 FUmemBUPXTWLywEAULUA6Y93WorwbQA3gjqs64xXOVzwh6IHPNBYONljnGY3zH3dLyANViYuP2IxOIE iZ1F8yVQsDGgfGE51s0vd8tVQlpzcTlwpEyueLx4QswZ14TBUUD6ER8kjFviGs4KLfYKhwCvHh58TQeKJgiSg0evbFapcYPeWBJKADoDO4I8Q2jTCbZpLP/KXY7aAhkOvLokz9h wxAC0w75HFNJucBKjRXxuaSrRT64JUIoe/DnAP4xS1rZVL2u7hVfeZx BBB0KkKYXs98upP5Gh5D/.../hcVQOfV74

Remove avast! home edition 4.8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.