home

avira_en____bc.exe

Avira Launcher

Avira Operations GmbH & Co. KG

This is a setup program which is used to install the application. The file has been seen being downloaded from indir.gezginler.net and multiple other hosts.
Publisher:
Avira Operations GmbH & Co. KG  (signed and verified)

Product:
Avira Launcher

Version:
1.1.52.15531

MD5:
cda21b84d5711462d5b1b40491422cfd

SHA-1:
5059200b07f1f017c1cb3176abcf40d7f4d25e76

SHA-256:
97ced34fcb9f04c6309ee958f3753e17f03714287b57fb23070b64799807b38f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 1:30:43 AM UTC  (today)

File size:
4.4 MB (4,600,536 bytes)

Product version:
1.1.52.15531

Copyright:
Copyright © 2015 Avira Operations GmbH & Co. KG and its Licensors

Original file name:
Avira.OE.Setup.Bundle.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\avira_en____bc.exe

Digital Signature
Signed by:
Avira Operations GmbH & Co. KG

Authority:
Symantec Corporation

Valid from:
3/2/2015 12:00:00 AM

Valid to:
3/1/2018 11:59:59 PM

Subject:
CN=Avira Operations GmbH & Co. KG, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden-Wuerttemberg, C=DE, SERIALNUMBER=HRA 722586, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.1=Ulm, OID.1.3.6.1.4.1.311.60.2.1.3=DE

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
647608575A1043EE626D49FFBAAB7303

File PE Metadata
Compilation timestamp:
11/23/2015 1:52:18 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:iM+M/F90uaObpQjpNu/f29CDnOY7twMjovxaXGWv:iQP0u9pQjXu/fxLAMMvxaX1v

Entry address:
0x26AAF

Entry point:
E8, E8, 3B, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, 10, B0, 45, 00, 75, 02, F3, C3, E9, 79, 43, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 7F, 0F, B6, 44, 24, 08, 0F, BA, 25, 8C, D0, 45, 00, 01, 73, 0D, 8B, 4C, 24, 0C, 57, 8B, 7C, 24, 08, F3, AA, EB, 5D, 8B, 54, 24, 0C, 81, FA, 80, 00, 00, 00, 7C, 0E, 0F, BA, 25, 70, B0, 45, 00, 01, 0F, 82, 2A, 44, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8...
 
[+]

Entropy:
7.9739  (probably packed)

Code size:
248.5 KB (254,464 bytes)

The file avira_en____bc.exe has been seen being distributed by the following 50 URLs.

http://indir.gezginler.net/i/184/.../

http://lb.cdn.m6web.fr/d/c/a/2c16cc12a9c4231eba05982d683f063c/56c3652b/soft/.../avira-free-antivirus_15-0-15-129_fr_404708.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_567094b99a694__mxb.exe

https://package.avira.com/package/oeavira/win/.../avira_de_av_566ddd758b001__adw.exe

http://dl.cdn.chip.de/downloads/.../avira_de_avprodl_5677125a86f02__wsd.exe

https://package.avira.com/package/oeavira/win/.../avira_de_av_5668a8fb476e2__adw.exe

https://package.avira.com/package/oeavira/win/.../avira_de_av_5676e107c9c55__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_de_av_566dcc7f6c831__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_fr_av_5669d2e0158ee__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_5670672b2d6c2__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_5580c43e0f9c6__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_ptbr_av_5665f886de614__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_56703d7653d8f__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_it_av_565c77c4f1df6__adw.exe

https://package.avira.com/package/oeavira/win/.../avira_ru_av_566811b3abe4e__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_566a3304b60ca__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_it_avprodl_566595e609b61__sem.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_566c3a7c9be56__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_5671686e4a16d__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_it_av_566ab5d1a1319__adw.exe

https://package.avira.com/package/oeavira/win/.../avira_de_aap60_3010301104_kcoommw8jxv9lou4m15l_wd.exe

https://package.avira.com/package/oeavira/win/.../avira_en_avprodl_566aa6adca820__bnt.exe

https://package.avira.com/package/oeavira/win/.../avira_ptbr_av_5672b9a6e7ac4__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_ptbr_av_5667866d79579__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_ru_av_55cb213332e27__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_ptbr_av_567174dc5bcd8__adw.exe

https://package.avira.com/package/oeavira/win/.../avira_ptbr_av_5670c276c06d4__ws1.exe

https://package.avira.com/package/oeavira/win/.../avira_en_speedup_3010076205_288p7oebwsfgvlow6rfu_wd.exe

https://package.avira.com/package/oeavira/win/.../avira_de_av_5676832718a0a__ws.exe

https://package.avira.com/package/oeavira/win/.../avira_en_av_56669849e5408__ws1.exe

Latest 30 of 212 download URLs

Scan avira_en____bc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.