home

cav_installer_x86.exe

COMODO Installer

Comodo Security Solutions, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from eu1.download.comodo.com.
Publisher:
COMODO  (signed by Comodo Security Solutions, Inc.)

Product:
COMODO Installer

Version:
5, 4, 189822, 1355

MD5:
cc3a22a7b551fdb8dbf93516cfa2adfb

SHA-1:
4fe5c5a08d501ac1f03d2e47b54994fa78dde088

SHA-256:
4fbf2c83a9d34a3e39ea27e7d893763fb94894b8278fa1f2db5a99dc3c038346

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:37:34 AM UTC  (today)

File size:
34.3 MB (35,959,112 bytes)

Product version:
5, 4, 189822, 1355

Copyright:
2005-2010 COMODO. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\cav_installer_x86.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc.

Authority:
The USERTRUST Network

Valid from:
4/8/2009 2:00:00 AM

Valid to:
4/8/2012 1:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc.", O="Comodo Security Solutions, Inc.", STREET=525 Washington Blvd, L=Jersey City, S=New Jersey, PostalCode=07310, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A59F518424A191FC34E8B637F7FB20C3

File PE Metadata
Compilation timestamp:
5/9/2011 11:25:08 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:zAQembByKAyONRE2+SFX22Zi0gNtOhhHVWsZPFe45Pej:zA7mb0ryONTFFmbNYfVWsFtPej

Entry address:
0x159FA2

Entry point:
B8, 44, CA, 06, 03, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, C6, DD, B7, A0, 6B, 24, 2A, E2, 81, 29, 13, ED, 91, 51, AB, 3A, 4D, 89, 4F, 12, D4, C1, F2, 24, 6C, 69, 5E, 9F, 44, 96, DC, 39, E4, 31, 78, 06, 0B, 3D, 9F, 18, D9, 1C, ED, 85, 73, 66, 48, E6, 77, 0D, 6D, D1, FA, B5, 72, 1B, 96, 0D, 50, 7C, DC, 29, D8, A4, 99, 06, 4A, 6C, 00, CB, 50, 12, 2D, 8B, 3B, A3, 67, A4, 68, 20, F6, A4, F1, AE, 64, BE, D9, FA, 2A, 81, CF, 4C, CD...
 
[+]

Packer / compiler:
PECompact v2

Code size:
2.6 MB (2,754,560 bytes)

The file cav_installer_x86.exe has been seen being distributed by the following URL.

http://eu1.download.comodo.com/cis/download/installs/1000/.../cav_installer_x86.exe

Scan cav_installer_x86.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.