home

avg645.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from d2lpoftoo4hdad.cloudfront.net.
MD5:
621a40cb9e42b079ae345d16db1e82f2

SHA-1:
87fa96c3092427cab771c5773596b0b0c2df26c1

SHA-256:
a9d102fb144c4011741bcf6792c50c78fd963e2c890a5e49b2e7c739d137ef23

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:37:41 PM UTC  (today)

File size:
139 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\avg645.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3:FB9YA81si1UjtFJzvXunRTEDl/0tpKLWTXxRovIVFcIFTnxFqk3LB5ILn:Fq1sLzvXe5tpKL8XxRovIzrxl1WL

Entry point:
D3, E2, E5, E4, EE, EC, EB, E5, ED, E8, E5, 20, 50, 61, 6E, 64, 61, 20, 47, 50, 20, 32, 30, 31, 34, 20, 3A, 0D, 0A, 0D, 0A, D4, E0, E9, EB, 20, 68, 74, 74, 70, 3A, 2F, 2F, 64, 32, 6C, 70, 6F, 66, 74, 6F, 6F, 34, 68, 64, 61, 64, 2E, 63, 6C, 6F, 75, 64, 66, 72, 6F, 6E, 74, 2E, 6E, 65, 74, 2F, 53, 69, 6C, 65, 6E, 74, 49, 6E, 73, 74, 61, 6C, 6C, 65, 72, 5F, 64, 6F, 74, 6E, 65, 74, 34, 2E, 65, 78, 65, 20, E7, E0, F0, E0, E6, E5, ED, 20, E2, E8, F0, F3, F1, EE, EC, 20, 54, 72, 6A, 2F, 43, 49, 2E, 41, 20, E8, 20...
 
[+]

The file avg645.exe has been seen being distributed by the following URL.

http://d2lpoftoo4hdad.cloudfront.net/SilentInstaller_dotnet4.exe

Scan avg645.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.