home

comodo-antivirus.exe

COMODO Installer

Comodo Security Solutions, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from tmpfile329.s3.amazonaws.com and multiple other hosts.
Publisher:
COMODO  (signed by Comodo Security Solutions, Inc.)

Product:
COMODO Installer

Version:
5, 5, 195786, 1383

MD5:
97873bc5bd1d1f5bff6b417a6a00a893

SHA-1:
5d16902c85af05b13c0f57034c498bd0be4e53c5

SHA-256:
beef6d6e2042ee1b0b87c957b632cb4374bef474b29a0335212d57b8803083fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 4:32:11 AM UTC  (today)

File size:
34.6 MB (36,332,872 bytes)

Product version:
5, 5, 195786, 1383

Copyright:
2005-2011 COMODO. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\comodo-antivirus.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc.

Authority:
The USERTRUST Network

Valid from:
4/8/2009 2:00:00 AM

Valid to:
4/8/2012 1:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc.", O="Comodo Security Solutions, Inc.", STREET=525 Washington Blvd, L=Jersey City, S=New Jersey, PostalCode=07310, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00A59F518424A191FC34E8B637F7FB20C3

File PE Metadata
Compilation timestamp:
7/5/2011 5:15:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:ChGNygakskyHox05RuqM5p//TnSXac6qw38MN9Vl:D0gafkyHcqM5ZK6jxP

Entry address:
0x15BFF9

Entry point:
B8, 60, CA, 5A, 03, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 3C, 31, A2, 5E, D8, AA, 78, 76, 22, 5F, 0E, 1B, 8C, 5B, C9, EB, 25, A8, 48, 9C, 4C, 9E, 17, D7, 3E, E4, A8, 3E, C5, 7D, D1, 99, 06, B9, 62, 6A, 02, 80, 9A, 1B, 7E, EA, D5, 68, 55, 68, 70, 7F, F9, 9B, D4, 7C, 6B, B8, D9, A8, 22, 6C, 0E, D7, 89, C8, 41, B2, E9, E8, 78, BD, 0D, 4C, BA, 2B, EB, 6A, 35, 2D, F3, 74, 8F, 63, 21, 04, 84, 1F, 4A, 43, 7B, 68, 17, DE, 42, 77, DF...
 
[+]

Packer / compiler:
PECompact v2

Code size:
2.6 MB (2,763,264 bytes)

The file comodo-antivirus.exe has been seen being distributed by the following 2 URLs.

https://tmpfile329.s3.amazonaws.com/download77/ic_trackings/767/.../comodo-antivirus.exe

https://tmpfile678.s3.amazonaws.com/download77/ic_trackings/767/.../comodo-antivirus.exe

Scan comodo-antivirus.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.