home

avira_free_antivirus_it.exe

Avira Operations GmbH & Co. KG

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Avira Operations GmbH & Co. KG  (signed and verified)

MD5:
8847a6fa26235f590fd677c058f93766

SHA-1:
ec511c07ef3d888828bfad1fde6995a64709b19d

SHA-256:
133e121a6f991c51a1d223e191ed4803729d518b0eab1409f8fc1cc0b7523f47

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
1/12/2025 4:58:54 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
8.9383

File size:
124.7 MB (130,743,208 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\avira_free_antivirus_it.exe

Digital Signature
Signed by:
Avira Operations GmbH & Co. KG

Authority:
VeriSign, Inc.

Valid from:
7/20/2011 2:00:00 AM

Valid to:
7/20/2014 1:59:59 AM

Subject:
CN=Avira Operations GmbH & Co. KG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54971FF238D2B866F27FC3FE6C9AD577

File PE Metadata
Compilation timestamp:
11/30/2005 10:08:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
3145728:nCykW42WyIo6qFSNQSCCWzj6VOX5G15SZW5/Y:nCTWtBIo3FSSP6VG5GLOWg

Entry address:
0x1000

Entry point:
E8, B7, 27, 00, 00, 50, E8, CB, 22, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, 40, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 42, 43, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 1C, 25, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, D4, 50, 41, 00, 6A, 65, 56, E8, 62, 24, 01, 00, 6A, 01, 56, E8, 3C, 24, 01, 00...
 
[+]

Code size:
76 KB (77,824 bytes)

The file avira_free_antivirus_it.exe has been seen being distributed by the following 23 URLs.

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1390451549&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=aHd5WdMixFbDxqdZlh20GPA7QZIXT1f9DxeApds4sfwc~D~EpojEUmowJK4YmPRNdoiRuLUsUZH1IW-SUXZZOthpe2C8cMAnzIqn2BnTdRHd0SGYTvQLCCbTnlkw9fO0WEm6-vQQrMM2fw1vKkO7aXS5FSW0lEpcbgrhhXk0rog_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1393042151&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZkeR48ini28cIgpc5sgxQiDqIt4gws9zx5nOTKKKFTBVDp5NGU8SCMttG3bMe4G0AJgM5LR-LL2Ad7ILKpMJngZTc0pbsUISoX3Ox6qBIkc4l~fBYuvCJ0GpaGixFNyYCJ1j7YuFhv3z05GRqVq6l95bASS~rFBZwCYDlsD23NQ_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1389913300&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gM40mQIcvQ3vXJHezTybctWlbEu5PXAfC-37F~uMUc1608KFLWCsfuxuNDNsStPf-wBZSKNPCqFmYIucTjFwn-IjwYeR7pH5bq2Gm1d8d7GCYwnGiyBMSXTXtxEum9n~9jVjcpttEaqn-ly7lGkcArsOtC1aW7FvGLIIfhBy9eg_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1395852991&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fsmU2rWc2YwByDs2RBZb1rkIjK87AEw--3iByzNDIgKBW9IqNYkOuzdeT-S1-ROqR15r1Na66zJW7MuPk9~ZGE7EPHS8-sHvFrKnD4isSXS6~uXW~hvkAu7WRt~GSLURyaCf0DAfJcixL8xjeOc6HhUiZyxl9SwLAGOrdld04cQ_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1391707944&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=az6ff43HVxTf-5v6nocI1QhinsvPcWZlxxAz1Xhc6ocjnwxzSAR554hXLUDELRotiysUdhVbGrqaVMXqGaLL9hcOvEk2OHt82Jo8w1ICYKFeuhhT11tSqlo1BYbS9K5zbvOAOnEsm9EfUPIKboS7FRB48uZTm4ZUNHFgK1xEqPk_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1394309069&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fCsGKYh~1bUz7wo8I38S9hk8UHRqGILIOCFm6aQiGB9TdQcppOrg245mmBdHI8BEHawFM~sCgoPUwbVBE9AiQs0uy8OEgE55ciFnPVM-yfQiMU7~2MQxnnc7pQfHAncjU7oeAyicSRlY8Nm6IfWozN2h7bUHuZNMMPo0oqULjhU_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1390097797&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FAQI7ynOVjhyeuB6WVbG54JlQ5nFbZFK3S0Ez4S1s-Jj-lykRyzvHOGGsyS0aAyNaGoTnY-fB232Ooe2GhJ83XfOENbxGvoxRrZoMNElbIa0itiNzLbL9lBMxmFyqlAksFgZdTV~Dv2q6tqV4F1OSRP2Pw0wbgZzxiOIG4RH6r8_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1395700041&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CkdS2rCqUkpAQKVnBxETZKrZLzcj-hEIY0lcFgHrtdm5Qh3yuVsIZcQoIgTfQlXOfpMdrlcY9X6volSywhLYrfiejVCK~7NMI8RfTMawW-1mFNRArVBq26foOqv0~oAQkMZp6KdXbblrI4qo1Rbv6YysqwGDeBdHVi~MZOF6Nuw_&filename=avira_free_antivirus_it.exe

https://www.avira.com/downloads/.../defaultDownload?product=avira-free-antivirus&os=win

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1392829871&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=PMLxOomNPeDRjxaYtZnAFMci17R6L~GaKK3sLflhcIYEp7mSuRF3Eg99Bq1v5OkV2PO7vQcxYA1ORW5wIOFbGkiy3WAaRGNO8NJVaEic2nFPYWCZLQQEAcViYApDYKFX338oGnwaNbGLnN8R-DTj6dryPNG~1utsYIJNTQ7NYPk_&filename=avira_free_antivirus_it.exe

http://www.avira.com/downloads/.../defaultDownload?product=avira-free-antivirus&os=win

http://personal.avira-update.com/package/wks_avira13/win32/it/.../avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1389591439&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SgEaHc0FxnFDNbe9v675c6yU6oakwmfZ4Y8kNCXcPNMGepwUVSp34SqF8QHkGR9ofINjK3gQ5m4Q2wx3Vvzexhn4myY73rQkh-lwhKBUWHWs~2CX~0ceXcpO-kFEayQlKjkyTrZcw0AHL-4dDGvc-THLTSxY5MQR5NyuCecZbjs_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1393661910&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gwBqjH83DaHi63vz3ROy8xR9bsv~rCHPUnor0xIeHWNy-N9EZrkpZo6KOtxaa4k3Q3pNTia~pVlHlHqLpCLdCxciAnLid32Bz7LHqsfveylr2qORO82Msesc3-CbiWTN-AAjJG679mQLfz8-VT~c9mLYjgKAh6HgC-ke~8S~crI_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1394600904&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ak32colE51Dx2TR~gAZhJmmSFn4Eg-x4jGkimFRm~vvvG6v7nlCgLk0jTkXFc5gOYocabG0MPo7L1HVFY3ZbyIk9u-Dbvq60Ux1s6qZr2uPJL38kmQ8tP41rMjROOyleGYOhP~-hGreLuA4GwkAYfmT8-xZ7DxYR~KjNh0hGvg8_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1391584453&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fMCbSvfLlqvN7o9dXPRbkI47-WQOzq-AR1fqfLYqcEag6rOUChBT3DhybkpTGbPTeBkq0asryrX2ypTXCNaQPENmB~dJEsPz8HFgi8hs5o-wrx9pydlXNX7N~MnLFCwyCFUKsAZUjhs2Bub7boNSBxCcIaUuRl5S6X0NS0m6Sxc_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1393541939&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FcvzFfr4GjGmNUkQBwJ7fQlBbD~6akTtMoj8eHT8B2eqQOl0beg9N~T1b816d5Y82D7ocrmceOUwwSVVcrWMr7PDFAgfJuOX~kMCVe6Jnk9ejMXJ1hgVpuy9N0y9j4qVXtdkjAFaDwcXJflaYTKMROXZ~fvA7i-qD7bqhcd9UFI_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1391910308&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=X6IXO6FAMI5ZBj98BxB-dPrbxZUzQysAXmARrFn9wCCvn5kb2we9PES1v5WvO3fiQd2x0zLnEJL8QFf9VE0l8JnMxpgvYvfqsFilx4q7LO3MZPifFD3tyuhpLs3dMPF~QfDacSVWAc1IA7jUuwawMi98BohTpUDBn2UceDvRbac_&filename=avira_free_antivirus_it.exe

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1391881201&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZuhOHnNQHoKiBot0kt3bHJdrvElH0aOq4chNYjprWDgzNdHoTdntX-YhbzS-o31pSOo~KCGBFE8pyUMxuqtnX0JjG~4Aciy~lgkyqBnCbv6EHrQYS6daP647ZgAVSxaa4dJu1yIsrtxpIEzHWowwP95j-sjWJ-FH35vETdGkFzE_&filename=avira_free_antivirus_it.exe

http://www.avira.com/downloads/.../defaultDownload?product=avira-free-antivirus

http://gsf-cf.softonic.com//ec5/11c/.../file?id_file=18069&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=yes&SD_used=0&Expires=1395291711&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Wta5qPfLH0a2SgU9BJzm6YLw07IQ6eNTBZEEYmWUrmu13CyUfQnTg3Uww5QVwXmRNH10ClTenksExYUTdDe8t64Gf~JQkt7dfhzKPrLMfAF5QMQpu9AAyLvPH8DiFfL1fIb5lA2~CYv0-DE0TCu0T1eKpA4n69jEnayJUEOceAY_&filename=avira_free_antivirus_it.exe

http://install.avira-update.com/package/wks_avira13/win32/it/.../avira_free_antivirus_it.exe

http://www.avira.com/downloads/.../defaultDownload?product=avira-free-antivirus&os=

Scan avira_free_antivirus_it.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.