home

avast_pro_antivirus_setup.exe

avast! Antivirus

AVAST Software a.s.

This is a self-extracting archive and installer. The file has been seen being downloaded from wgtot42.digitalriver.com and multiple other hosts.
Publisher:
AVAST Software  (signed by AVAST Software a.s.)

Product:
avast! Antivirus

Description:
avast! Antivirus Installer

Version:
9.0.2011.263

MD5:
00ddc77ecc67012676f66570fac16bb9

SHA-1:
249b5dc1bcdc7a16b59074eed014f9d3a38310ba

SHA-256:
8364bfce8de244267d036c428bb106d278b3fb5e3d2a1de8193c373be7242909

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:03:44 PM UTC  (today)

File size:
115.1 MB (120,738,008 bytes)

Product version:
9.0.2011.263

Copyright:
Copyright (c) 2013 AVAST Software

Original file name:
SfxInst.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\avast_pro_antivirus_softarchive.net\avast_pro_antivirus_setup.exe

Digital Signature
Signed by:
AVAST Software a.s.

Authority:
DigiCert Inc

Valid from:
7/12/2013 5:00:00 AM

Valid to:
9/14/2016 5:00:00 PM

Subject:
CN=AVAST Software a.s., O=AVAST Software a.s., L=Praha 4, C=CZ

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0EF5ECA7BD31CFC3A7F8E6259B423359

File PE Metadata
Compilation timestamp:
12/17/2013 3:27:19 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:ICI8rB7QzkPaGDvQCzi0ZNrAtio3W6bP+ycF6/kdCUGroj:IXgRQzkCYvXztNrp6bPV/kdCUGkj

Entry address:
0x46D83

Entry point:
E8, 77, C7, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 6C, 54, 47, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 8C, 32, 47, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63...
 
[+]

Entropy:
7.9998  (probably packed)

Code size:
452.5 KB (463,360 bytes)

The file avast_pro_antivirus_setup.exe has been seen being distributed by the following 8 URLs.

http://wgtot42.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B91F9B86FDE80BFCE2B6D2983E0AD920D8B8A78CE330073C8478727E2B6BD9ED8A2F6EA08572BC6527BA513C160F86A718EFAA20C4FC771A1B5435EC90C7691CA8F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://wgtot28.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B0EE20E3302AC4A328D273C5554AF209572345D0E05F14E5C97879450002A5F84545C2E528448C5854E75723DA7F47ED91AC941FA10BCB6A466B3177F278C70B58F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://wgtot28.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BE6876B8EBBD97CF58D273C5554AF2095D1020A45DA592724F6560A13634236CE31592A669B725FC918D60AC001F8C22F2AA79DDB2845B039D46737BA0A26455C8F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://wgtot28.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B9733D02022EB35548D273C5554AF2095061641F9A885E86E90775072D632845E6732B2E65579D024F6A6735B74563DF7F0D3E8312163CA21871E8EB67680BF338F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://wgtot42.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BB61A2150C6E525FB2B6D2983E0AD920D981826FA2DDBE08E9415E292BF3ED992CFA3A3D836DA453E349584D670F2C63642171A243CF2E7BBCA3E62C13A0C81098F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://software-files-a.cnet.com/s/software/13/50/28/.../avast_pro_antivirus_setup.exe

http://wgtot28.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BB3FEBC0EE34729358D273C5554AF209567A0C102F1D8DDE749170F8B70B7FD14171550C07C881A0E3A91B9BB0A945DEF4355EE18CDA588DC50D282EB8C0029EC8F5DC70B1E40C906/.../avast_pro_antivirus_setup.exe

http://files.avast.com/.../avast_pro_antivirus_setup.exe

Scan avast_pro_antivirus_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.