home

kaspersky_antivirus_gratuit.exe

Win

Microsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from special.s.kaspersky-labs.com.
Publisher:
Microsoft

Product:
Win

Version:
1.00

MD5:
3a852c2e952338fc423c819eb6ec7503

SHA-1:
a7277df3c0c155fca8ab5167f5c2b2baaaa29345

SHA-256:
9fdfe5bf4640e4408cb6eff7f5709e98a0436dd34d8a768ea9a69ca81cb26eea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:54:23 PM UTC  (today)

File size:
2.1 MB (2,213,725 bytes)

Product version:
1.00

Original file name:
Win.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\kaspersky_antivirus_gratuit.exe

File PE Metadata
Compilation timestamp:
6/14/2011 12:01:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:jYm4zME9HnIM/mobYngCoYhyoCOlwGMn2wzoGzdux:sm4zM0HnIM/mob8phXIoqdE

Entry address:
0x3670

Entry point:
C3, C3, C3, C3, C3, C3, C3, C3, BC, 4E, B6, 00, 28, F2, 88, EB, 85, DE, 73, 05, B6, 50, 80, F9, 80, 0F, AF, C0, 84, EF, 0F, BE, CC, 0F, B6, F7, 69, C2, 81, 5D, 9E, 06, F3, F6, C0, 34, 46, E8, 00, 00, 00, 00, 5E, F2, 0F, BE, C5, 68, 9D, 07, 26, 00, 8B, E8, 0C, F5, F6, C5, EC, 08, D6, 0F, AF, D3, 68, 86, 66, F7, 00, 68, 5D, 21, 34, 00, 76, 0A, 80, ED, 3A, 8D, 15, D7, 7D, 6A, C2, 47, 0F, AF, D5, 56, 51, 28, CF, C7, C5, F1, E1, 18, B7, F7, C7, 83, 93, 0B, 88, B5, 46, BB, D7, E3, EF, 7A, 4D, C7, C1, 59, 04, D6...
 
[+]

Entropy:
7.9166  (probably packed)

Code size:
172 KB (176,128 bytes)

The file kaspersky_antivirus_gratuit.exe has been seen being distributed by the following URL.

https://special.s.kaspersky-labs.com/.../kaspersky_antivirus_gratuit.exe

Scan kaspersky_antivirus_gratuit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.