home

avast_free_antivirus_setup_online.exe

Win

Microsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from global-shared-files-l3.softonic.com.
Publisher:
Microsoft

Product:
Win

Version:
1.00

MD5:
530cb06184451dc661a3d59f9f006b77

SHA-1:
42d1fb49c670ce04335e4c2905c01914a76adda4

SHA-256:
6bdda873b91e098e54555eebbc580c6a865a97ec42012632f29b8162441ca5d4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:34:29 AM UTC  (today)

File size:
5.1 MB (5,296,965 bytes)

Product version:
1.00

Original file name:
Win.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\avast_free_antivirus_setup_online.exe

File PE Metadata
Compilation timestamp:
6/14/2011 2:01:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:vPemhFb3pqyDbArhbjvxtVc76Pl8ZKPBOhF+B+DBoEcv6xIpT/x1wK:vG6vgbNI76l8i/wDBoE86WpTXwK

Entry address:
0x3670

Entry point:
C3, C3, C3, C3, C3, C3, C3, C3, F1, F6, C6, B7, FF, C6, 68, 7E, D6, 60, 00, 80, D3, 63, 0F, B6, F2, 81, F0, 6B, 6A, 9A, 7E, 4A, 69, C8, A6, 22, 76, 7D, 03, F2, 85, FB, 72, 0A, 1B, F0, 8D, 2D, 93, 46, 4C, 4C, B1, 65, 68, EE, 0E, 00, 00, F3, 5F, 0F, AF, CA, 81, EF, B7, 00, 00, 00, F2, 0F, B6, D4, 80, CA, 6B, 78, 02, 39, F1, 85, EB, F7, C6, 22, A8, F2, B6, 46, 81, EF, 23, F2, FD, FF, 01, D0, F7, C7, 3E, 03, EE, 7E, F3, 81, EF, DE, 0D, 02, 00, FF, C1, 69, DB, 32, 77, 95, 54, F7, C1, 37, D6, A5, 57, B1, D4, 34...
 
[+]

Entropy:
7.9106  (probably packed)

Code size:
172 KB (176,128 bytes)

The file avast_free_antivirus_setup_online.exe has been seen being distributed by the following URL.

http://global-shared-files-l3.softonic.com/e8b/3fb/.../file?nvb=20150118010112&nva=20150118130212&token=07f9a1a3e13097fc15bc0&SD_used=0&channel=WEB&fdh=yes&id_file=18007&instance=softonic_es&type=PROGRAM&filename=avast_free_antivirus_setup_online.exe

Scan avast_free_antivirus_setup_online.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.