home

0_avast_launcher.exe

Vega Stp

PGT

The application 0_avast_launcher.exe has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup. The file has been seen being downloaded from www.perisigmoiditisgashing.site.
Publisher:
PGT

Product:
Vega Stp

Description:
smart install

Version:
91.105.119.175

MD5:
0246959dd08d102fa776a52912509a9b

SHA-1:
d8a10ef2cd02291c4166566b095fb26235f17ef5

SHA-256:
17c46146e625b21a5dd4997e742ad7ff91cfedecebc339ac31d34a87b68383dd

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
6/29/2025 12:01:30 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.InstallMonetizer (M)
16.7.16.11

File size:
868.5 KB (889,344 bytes)

Product version:
91.105.119.175

Copyright:
Copyright 2015

Trademarks:
US CAPS

Original file name:
tinyinstall.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
5/1/2016 1:48:11 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:znhOM+f4aTI3aSd9usk0TL45cdAbkdfPhOSHC7JVq:V5achbusf3QcdJBHuJ

Entry address:
0x4B82

Entry point:
E8, 92, 26, 00, 00, E9, 75, FE, FF, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, 83, 66, 04, 00, C7, 06, E8, E3, 40, 00, C6, 46, 08, 00, FF, 30, E8, C9, 00, 00, 00, 8B, C6, 5E, 5D, C2, 04, 00, 55, 8B, EC, 8B, 45, 08, C7, 01, E8, E3, 40, 00, 8B, 00, 89, 41, 04, C6, 41, 08, 00, 8B, C1, 5D, C2, 08, 00, FF, 15, 38, D0, 40, 00, E9, 7B, 69, 00, 00, 55, 8B, EC, 56, FF, 75, 08, 8B, F1, 83, 66, 04, 00, C7, 06, E8, E3, 40, 00, C6, 46, 08, 00, E8, 1D, 00, 00, 00, 8B, C6, 5E, 5D, C2, 04, 00, FF, 15, BC, D0, 40, 00, E9, 03...
 
[+]

Entropy:
7.4611

Code size:
44.5 KB (45,568 bytes)

The file 0_avast_launcher.exe has been seen being distributed by the following URL.

http://www.perisigmoiditisgashing.site/0_avast_launcher.exe

Remove 0_avast_launcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.