home

ava_1-1_setup.exe

Installazione di Avanti Un Altro!

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Product:
Installazione di Avanti Un Altro!

Version:
2, 0, 0, 24

MD5:
e0818a74fbc9dce911498724e04db08f

SHA-1:
ca0f0022181b702f909b9b6e8053d952f126443e

SHA-256:
715d7907068ae8948f7a91a380a48fb56e1d5d853decb42c905bcdb296aa0bdb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:18:16 AM UTC  (today)

File size:
20.8 MB (21,771,779 bytes)

Product version:
2, 0, 0, 24

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\ava_1-1_setup.exe

File PE Metadata
Compilation timestamp:
12/17/2004 9:59:47 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:fr1EaDHML9u7+lss5jD7HtWuMpBp9ixQ0T1Qjr9YkWjA19oWtIKFY4XskmZu/Wpg:fr1bTC9uA1hHtWtNGTeWjGtJYVLu+uBf

Entry address:
0x12FFD

Entry point:
55, 8B, EC, 6A, FF, 68, 68, 77, 41, 00, 68, 24, 5D, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, A0, 70, 41, 00, 33, D2, 8A, D4, 89, 15, A0, E1, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 9C, E1, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 98, E1, 41, 00, C1, E8, 10, A3, 94, E1, 41, 00, 33, F6, 56, E8, BA, 03, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, FE, 2A, 00, 00, FF, 15, 0C, 71, 41, 00, A3, AC, E6, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
88 KB (90,112 bytes)

The file ava_1-1_setup.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/ca0/f00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655012&instance=softonic_it&type=PROGRAM&Expires=1447573640&Signature=F8p64g~CGG9vmmMTwabuJXLDVwTeYEEV0l6Vap~916PVCCgvaxocGi-RzAFhu9SX~M3gAFtgrWE2jZutGc28j4ih1Mdi1Ob6lOW~tGxTumQJtLJ9F49sVOdgtcZeD6HbFQM0yFwono3LHQpAmNifBOiK-ZX0lEauQroi~5HVpcE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=aua_1-1_setup.exe

http://gsf-cf.softonic.com/ca0/f00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655012&instance=softonic_it&type=PROGRAM&Expires=1470702889&Signature=NLbtKiWu-THdIGtLKHBMSYzgfncYlSvsZBL6RStapfNgf0BB27JCybcwg4uDydWdnCZOTzabOOdYjh~BkEoeWbgCegBUMessQPm1ZjRjXGH8GeN3X9KozxXIKDox09-mu5hIurpqN1IOkGtsJka39Awgvq2dw9zi0eVPfgLphqg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=aua_1-1_setup.exe

http://gsf-cf.softonic.com/ca0/f00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655012&instance=softonic_it&type=PROGRAM&Expires=1476937172&Signature=etsw2XE5WT~fx4RwJDCdGSFDuKLLuQuyyf~h~Vko~2mAf8sQ~VOXQSam4vP4ZGi-gYxDRpVk5J2z408~wq0dYmTn8TfoW4mfog10g7PfICn5DJjyRj15tsm7p3XP~AtYQtaDTYKVOfazYClI5vwr2Gcggp-UpyVhDfvei1VLKck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=aua_1-1_setup.exe

http://avanti-un-altro.softonic.it/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPJuuM5I3KISU3UPMYypoWV JXLL2TiXlCLg5bM0v6R/Y/JRzx7cwRMzZH04/GPU5CjQ35tOa2/v4txL97V IveI9qEefl6hEXSew7ObRJkKgAAtKDc4Ev5RR8DjXXZe7y6Rrez0i0psMXsBey6 /dddPOAYvqOV9wdEJndPUZKj7KLrBfIbmltc/7xDOkdMm/3DcVdeQJ5LML7H2kSesPHz4WcHBp1F0LQ6TXeD/1qO1T3xQrEaDt1k1K5TQb2spC7K buS9AexnwIJMODtlFsAQdOiZh8W6/UGYT1u5v56snXRztVeQzyTz1em7gunxspapl 55NlLZdAX 1wPk0m/EZAxOyMbpaNWepQCA5S7gBIhsX2qrG9vADJPzaLZBEDhjLFPp1K5 AVdlNGeYDOnQrlBv6OFAQewR7hRsezoRXHEGttKFPzlCuL2ix/pBwRWa4NmVbqGUL/.../aVD8AFXltS7dAq824FfZMykutINOsQQu RUd4py2eQdMPk2V3cUhcu0TDJEiFOoKeaUXw=

http://gsf-cf.softonic.com/ca0/f00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655012&instance=softonic_it&type=PROGRAM&Expires=1460356673&Signature=bqYrldHC7askE4yaPmNXLDdt-VPmghia2zA3eZhaMZBw51C206ZD9ii2sKzd2loMQS9z8XWkL7PkZp7wEZTfk9oD72m-CoD1S4~V51E4aTG52yGm1up2u5rOJvTthMloKKJGpsvN4IoDzJVFt0wJlxb1jTrJSk3c91hj7QZRvSc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=aua_1-1_setup.exe

http://gsf-cf.softonic.com/ca0/f00/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69655012&instance=softonic_it&type=PROGRAM&Expires=1452996830&Signature=EZjF0iy0Yw3iGx7qbhjeZAcclfDPdfg-b1hhbMoIDZ978r6--BB7aHNd7u0yUN4HRR8D43fQWIOeaAZq0t3jEiE4U15aln1sj5jQOImjVidneoOG-zfUNz-k46lL4Y0b~kVRRavpbOPUld6c5SgUVJQW7pGEhW7nY9oFPUQIcsI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=aua_1-1_setup.exe

Scan ava_1-1_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.