avira_de_av_5808071142__ws.exe

Avira

Avira Operations GmbH & Co. KG

This is a setup program which is used to install the application. This is installed with multiple programs including Avira Antivirus and Avira Free Antivirus. The file has been seen being downloaded from package.avira.com and multiple other hosts.
Publisher:
Avira Operations & Co. KG  (signed by Avira Operations GmbH & Co. KG)

Product:
Avira

Version:
1.1.30.21727

MD5:
81472308a99aaf0f7f0a64a170e8a2ad

SHA-1:
ee3be75a452ebb43036ca4334b972b05de099293

SHA-256:
7ba2be7c8ac8382cdd09afdc16e6ff7c0a1eb3184a9e75abf7a1673914bf5776

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 5:17:15 PM UTC  (today)

File size:
4.3 MB (4,515,896 bytes)

Product version:
1.1.30.21727

Copyright:
Copyright © 2015 Avira Operations GmbH & Co. KG and its Licensors

Original file name:
Avira.OE.Setup.Bundle.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\avira_de_av_5808071142__ws.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/17/2014 1:00:00 AM

Valid to:
1/17/2017 12:59:59 AM

Subject:
CN=Avira Operations GmbH & Co. KG, OU=Global Assembly, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden-Württemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3AEA7D79BC1D84D2E1AB0FFC8BC35658

File PE Metadata
Compilation timestamp:
11/28/2013 3:14:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:LqDabJPmgZfrNvMpNP/GcnJtRcKtTE7+Ppi0ZyK4nH+t:L+adPpBYNn7nJHcmZ0yBt

Entry address:
0x267A5

Entry point:
E8, C9, 39, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, D0, 60, 45, 00, 75, 02, F3, C3, E9, C4, 40, 00, 00, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 44, 7C, 45, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 80, 61, 45, 00, 01, 0F, 82, 79, 41, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B...
 
[+]

Entropy:
7.9730  (probably packed)

Code size:
229.5 KB (235,008 bytes)

The file avira_de_av_5808071142__ws.exe has been discovered within the following programs.

Antivirus Pro  by Avira GmbH
www.avira.com
About 4% of users remove it
Avira Antivirus  by Avira Operations GmbH & Co. KG
11% remove it
Avira Free Antivirus  by Avira GmbH
Avira AntiVir Personal includes a branded version of the Ask.com Toolbar, a web browser extenstion that provides search advertising and results. Upon installation the user is presented with the option to install the Ask toolbar.
www.avira.com/free-av
25% remove it
www.Toolwiz.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file avira_de_av_5808071142__ws.exe has been seen being distributed by the following 50 URLs.

https://package.avira.com/package/oe/win/.../avira_it_av_550e771cca8ca__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5811361960__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_35356353_9i5n4dcoi86utpqdvnm7_wd.exe

https://package.avira.com/package/oe/win/.../avira_es_av_5911051393__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5831558670__ws.exe

https://package.avira.com/package/oe/win/.../avira_es_av_5500f49cbd13d__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_avpro_3007342516_dib9mzuusfvz4rmvqd4s_wd.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5813567136__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5909326857__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5510ab1b72892__ws.exe

https://package.avira.com/package/oe/win/.../avira_es_av_5852925750__ws.exe

https://package.avira.com/package/oe/win/.../avira_it_av_5511a63b6694b__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5860610956__ws.exe

https://package.avira.com/package/oe/win/.../avira_fr_av_44836148_428cnk74asfplh3o5c7c_wd.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5832031659__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5910979483__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5843688370__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5835214557__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5908205882__ws.exe

https://package.avira.com/package/oe/win/.../avira_de_av_5822998370__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5869138482__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5860243875__ws.exe

https://package.avira.com/package/oe/win/.../avira_ptbr_av_5944438121__ws.exe

https://package.avira.com/package/oe/win/.../avira_es_av_5867111337__ws.exe

https://package.avira.com/package/oe/win/.../avira_it_av_550e82349846f__ws.exe

https://package.avira.com/package/oe/win/.../avira_es_av_5906827195__ws.exe

https://package.avira.com/package/oe/win/.../avira_de_av_5849254720__ws.exe

https://package.avira.com/package/oe/win/.../avira_de_av_5807897870__ws.exe

https://package.avira.com/package/oe/win/.../avira_en_av_5829725678__ws.exe

https://package.avira.com/package/oe/win/.../avira_es_av_44986696_ycc83mqozsk0nie07qvx_wd.exe

Latest 30 of 451 download URLs

Scan avira_de_av_5808071142__ws.exe - Powered by Reason Core Security