avg_remover_stf_x64_2015_5501.exe

AVG Internet Security

AVG Technologies CZ, s.r.o.

Publisher:
AVG Technologies CZ, s.r.o.  (signed and verified)

Product:
AVG Internet Security

Description:
AVG Remover Utility

Version:
15.0.0.5501

MD5:
23e03805a44a9d4f9cba544196f956e5

SHA-1:
d522d4676c9c5c98b2f6833597f3b718d218ecf1

SHA-256:
e9efa8195202343b575e823e8af047da7dc82568b9a43f4b79af5a92aa7ba7ed

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 7:27:56 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Worm.Runouce-1125
0.98/21286

File size:
3.5 MB (3,681,088 bytes)

Product version:
15.0.0.5501

Copyright:
Copyright (C) 2014 AVG Technologies CZ, s.r.o.

Original file name:
avgremoverx.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\avg_remover_stf_x64_2015_5501.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/6/2012 12:00:00 AM

Valid to:
1/5/2015 11:59:59 PM

Subject:
CN="AVG Technologies CZ, s.r.o.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AVG Technologies CZ, s.r.o.", L=Brno, S=Jihomoravsky kraj, C=CZ

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4984489DEC6200DECEAD93D4732CABCA

File PE Metadata
Compilation timestamp:
9/7/2014 9:00:10 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
49152:Oy0PQwHmyNJSqSD3fbksP4Lmv8LC3fxKyqdFfuzRlswBe38s6bMQnDmg4JIV4R9M:aHNi9vTP9vt3dqLqlsqhYoN

Entry address:
0x1CDA5F

Entry point:
E8, BF, 54, 00, 00, E9, 7B, FE, FF, FF, E8, D5, 4C, 00, 00, 85, C0, 75, 06, B8, CC, B1, 67, 00, C3, 83, C0, 0C, C3, 55, 8B, EC, 56, E8, E4, FF, FF, FF, 8B, 4D, 08, 51, 89, 08, E8, 20, 00, 00, 00, 59, 8B, F0, E8, 05, 00, 00, 00, 89, 30, 5E, 5D, C3, E8, A1, 4C, 00, 00, 85, C0, 75, 06, B8, C8, B1, 67, 00, C3, 83, C0, 08, C3, 55, 8B, EC, 8B, 4D, 08, 33, C0, 3B, 0C, C5, 60, B0, 67, 00, 74, 27, 40, 83, F8, 2D, 72, F1, 8D, 41, ED, 83, F8, 11, 77, 05, 6A, 0D, 58, 5D, C3, 8D, 81, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8...
 
[+]

Entropy:
7.0547

Code size:
2 MB (2,128,384 bytes)

The file avg_remover_stf_x64_2015_5501.exe has been seen being distributed by the following 21 URLs.

http://lb.cdn.m6web.fr/d/c/a/4cce638a276a0832109e4556fc135e04/556caba8/soft/.../avg-remover_2015-5501_en_376878_32.exe

http://www.programosy.pl/.../pobierz,avg-remover,3.html

http://www.scanwith.com/download_soft.php?d=cc666a97872bb371f0e1aa679ab20dd4&s=1267&f=AVG_Remover.htm

http://www.tkqlhce.com/click-4121481-11758604?url=http://download.avg.com/filedir/util/.../avg_remover_stf_x86_2015_5501.exe&sid=1174081625

http://www.tamindir.com/indir/MjAxNi0wNy0yMCAyMjowODoxMA==/avg-remover/windows/.../

Scan avg_remover_stf_x64_2015_5501.exe - Powered by Reason Core Security