home

avg5012.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from d2c05t2osze7ht.cloudfront.net.
MD5:
7b59b0e3503d0009a1c4c65b150b036a

SHA-1:
d169e8695fc43724315c1d9d8c0b201fb90e1a4b

SHA-256:
31616d1554c95b2ffcd29d07a9246c07d1bb4c08ec4d30bac7dcbdd7ffda4cfa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/4/2025 11:37:57 PM UTC  (a few moments ago)

File size:
314 KB (321,536 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\avg5012.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:OFaD4FZT8qbTR7SquD4L8vioH/X8i9DLnHWcefjVo8bS5V85faGSL:DDIZwgVxGq86oH/MKvnolgTGM

Entry point:
33, B6, 97, 6D, EA, D1, D4, 63, 40, 52, 01, 15, 30, 28, 2C, 29, 5C, 8C, EE, 9C, 27, 68, 93, 7E, D5, C3, F8, 4E, 52, 56, 05, 6C, DF, 87, F2, A0, 6A, 03, A3, 90, 02, B7, A4, 65, 40, 2D, B7, 65, 4F, 6D, 24, 51, AC, 25, 60, B3, E4, 6F, ED, 53, 0B, 22, 1F, 76, B7, 68, E7, CA, 35, BB, B1, 99, 20, A1, 58, B0, 93, 46, 5C, B4, B4, 50, 0D, 96, BB, 17, 6E, 3A, 72, 4C, 1C, 94, 05, 09, D9, D9, 8E, 74, 36, 1E, EC, 78, CA, 77, 52, F2, 24, 45, FA, 2B, A0, 10, D2, 13, B6, 09, 7E, 4A, 94, 22, BB, 6B, 50, B7, B2, 61, C8, B7...
 
[+]

The file avg5012.exe has been seen being distributed by the following URL.

http://d2c05t2osze7ht.cloudfront.net/SilentInstaller_dotnet4.exe

Scan avg5012.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.