» avgnt.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (3)

avgnt.exe

AntiVir Desktop

Avira GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘avgnt’. This is installed with Avira AntiVir Personal - Free Antivirus.

File name:

avgnt.exe

Publisher:

Avira GmbH

Product:

AntiVir Desktop

Description:

Antivirus System Tray Tool

Version:

9.00.00.12

MD5:

29680a793f690eef4aaa68479d2a6df8

SHA-1:

a07ceabce79b3354c25fdd5e20d765cdcd0174f7

SHA-256:

fd833ad1f0609894547fde3f8910dee13f9b08f03206267ea08474ac71ab7de3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

False Positives:

A number of engines detected this file but were erroneous detections (false positives).

Analysis date:

10/8/2024 3:38:57 PM UTC (today)

File size:

204.3 KB (209,153 bytes)

Product version:

9.00.00.12

Trademarks:

AntiVir® is a registered trademark of Avira GmbH, Germany.

Original file name:

avgnt.exe

File type:

Executable application (Win32 EXE)

Language:

Spanish (Mexico)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\basic\avgnt.exe

File PE Metadata

Compilation timestamp:

3/2/2009 4:00:27 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:EiaAXk92iew/bIVJCxim5nxlbsw/iuOx5k+vZRgFZRgfr:EiOrIVJhonxjiuOxW+1

Entry address:

0x5700

Entry point:

E8, A3, 04, 00, 00, E9, 37, FD, FF, FF, 3B, 0D, 28, 90, 42, 00, 75, 02, F3, C3, E9, 25, 05, 00, 00, 6A, 14, 68, 18, 32, 42, 00, E8, D7, 03, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, DF, 05, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, CD, 03, 00, 00, C2, 10, 00, 6A, 0C, 68, 38, 32, 42, 00, E8, 79... 
[+]

Entropy:

5.9362

Code size:

97 KB (99,328 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

avgnt

Command:

"C:\Program Files\avira\antivir desktop\avgnt.exe" \min

The file avgnt.exe has been discovered within the following programs.

Avira AntiVir Personal - Free Antivirus by Avira GmbH

Avira AntiVir Personal includes a branded version of the Ask.com Toolbar, a web browser extenstion that provides search advertising and results. Upon installation the user is presented with the option to install the Ask toolbar.

www.avira.com/free-av

24% remove it

Avira AntiVir Premium by Avira GmbH

Publisher's description - “As life grows in more digital directions, great PC antivirus becomes only one part of your overall security. The latest version of our premium antivirus now offers more ways to be secure, including web anti-tracking and mobile protection.”

www.avira.com/en/for-home-avira-antivirus-premium

12% remove it

Avira AntiVir Professional by Avira GmbH

Publisher's description - “No matter what your employees open—or where they click—their PCs, your customers’ privacy and your company’s reputation are guarded against viruses, phishing and other cyber threats.”

www.avira.de

3% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.