home

kav16.0.0.614en_8201.exe

Kaspersky Anti-Virus

Kaspersky Lab

This is a setup program which is used to install the application. The file has been seen being downloaded from trial.kaspersky-labs.com.
Publisher:
Kaspersky Lab

Product:
Kaspersky Anti-Virus

Description:
Kaspersky Anti-Virus [16.0.0.614.0.17.0]

Version:
16.0.0.614

MD5:
bf0390fd1bcdd80330e8536b7ee58d3a

SHA-1:
3b881654daebbfab5ea86d7b4681fd4e02344f9f

SHA-256:
dd38d69918e7d7b77ae98bebdf6c97841f641b9299a7f4f283ad807af0b0dbf4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:37:43 PM UTC  (today)

File size:
1.9 MB (1,978,992 bytes)

Product version:
16.0.0.614

Copyright:
© 2015 AO Kaspersky Lab. All Rights Reserved.

Trademarks:
Registered trademarks and service marks are the property of their respective owners

Original file name:
Setup.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\kav16.0.0.614en_8201.exe

File PE Metadata
Compilation timestamp:
7/9/2015 2:09:42 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:9/ME9HnIMIA/Iq/tUNI/Gr81PPSeuwuDzdurJsgL:9/M0HnIMIae2GruPPSeK/deJsgL

Entry address:
0x68E7

Entry point:
60, 0F, C1, EB, D0, FC, 87, DD, F7, C7, 0A, 5D, 1E, 6E, 86, D3, 0F, BE, F3, 21, D1, 0F, AD, CB, 0F, AD, C7, C6, C3, DB, D3, F5, D2, C0, 2B, F2, F7, DD, 84, F6, BB, 95, 37, 3E, 4F, C6, C4, E5, F6, C5, FF, 0F, B6, E8, 88, CF, 86, F1, 2C, 22, 0F, BC, C9, C0, ED, D5, E8, 24, 00, 00, 00, 89, F0, 23, D6, 8B, CE, 0F, A5, FF, 0F, A4, C8, 06, 8B, DE, 81, FF, 8D, 2B, 00, 00, 73, 05, F6, D0, 0F, A3, C7, C1, F6, 5B, D3, DE, 2B, EB, F2, 3A, CC, 88, DB, 30, D9, 0F, CF, 0F, BD, D9, 0F, A5, C7, 81, F2, 07, 69, 00, 00, 8A...
 
[+]

Entropy:
7.9850  (probably packed)

Code size:
39.5 KB (40,448 bytes)

The file kav16.0.0.614en_8201.exe has been seen being distributed by the following URL.

http://trial.kaspersky-labs.com/trial/registered/.../kav16.0.0.614en_8201.exe

Scan kav16.0.0.614en_8201.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.