home

avira_free_antivirus_en.exe

Avira Operations GmbH & Co. KG

This is a setup program which is used to install the application. The file has been seen being downloaded from platinum.wifi and multiple other hosts.
Publisher:
Avira Operations GmbH & Co. KG  (signed and verified)

MD5:
95c8477a4b74308714a11818dcbcc903

SHA-1:
b51642aff56379c0a649c242c960bf102f0157cb

SHA-256:
7da316c86f5df0fd0aa77257aa8ba7f74e29ff8890f5f1d9fa32b62329e850c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:50:07 AM UTC  (today)

File size:
94.6 MB (99,218,336 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\avira_free_antivirus_en.exe

Digital Signature
Signed by:
Avira Operations GmbH & Co. KG

Authority:
VeriSign, Inc.

Valid from:
7/19/2011 7:00:00 PM

Valid to:
7/19/2014 6:59:59 PM

Subject:
CN=Avira Operations GmbH & Co. KG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54971FF238D2B866F27FC3FE6C9AD577

File PE Metadata
Compilation timestamp:
11/30/2005 3:08:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
1572864:b0/9NXlZrdvEm+uJzqSlMR9UdsJl02XQqScuUXlMHpi5OdQIsu1Qb:b0/vddJOSlMn6sJi2jZXuHpX/LG

Entry address:
0x1000

Entry point:
E8, B7, 27, 00, 00, 50, E8, CB, 22, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, 40, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 42, 43, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 1C, 25, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, D4, 50, 41, 00, 6A, 65, 56, E8, 62, 24, 01, 00, 6A, 01, 56, E8, 3C, 24, 01, 00...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
76 KB (77,824 bytes)

The file avira_free_antivirus_en.exe has been discovered within the following programs.

BitTorrent  by BitTorrent Inc.
BitTorrent is a desktop application that allows you to work with torrent files.BitTorrent allows you to download files available as torrents, search torrent sites for music, videos, books, software and other free or public domain material.
www.bittorrent.com
7% remove it
Mozilla Firefox 13.0 (x86 en-US)  by Mozilla
Firefox 13 adds and updates several features, such as an updated new tab and home tab page. The updated new tab page is a feature similar to the Speed Dial already present in Opera, Google Chrome, Apple Safari, and Windows Internet Explorer.
www.mozilla.org/firefox
12% remove it
 
Powered by Should I Remove It?

The file avira_free_antivirus_en.exe has been seen being distributed by the following 3 URLs.

http://platinum.wifi/wifi/internet/Program Security Komputer/Anti Virus/.../avira_free_antivirus_en.exe

http://personal.nl.avira-update.net/package/wks_avira/win32/en/.../avira_free_antivirus_en.exe

http://personal.avira-update.com/package/wks_avira/win32/en/.../avira_free_antivirus_en.exe

Scan avira_free_antivirus_en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.