aswOfferTool.exe

by Avast / Gen Digital
Endpoint Security

Summary

Avast offer/promotion tool

aswOfferTool.exe is the 2137th most commonly executed Windows program in EchoTrail's dataset, observed 264 times across enterprise environments. It typically runs from C:\Program Files\AVAST Software\Avast\setup and it is most often launched by AvastSvc.exe.

2137th
most commonly executed Windows program
264
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files\AVAST Software\Avast\setup88.64%
  • C:\Windows\Temp\...11.36%

Top Hashes (SHA256)

  • 8b09a014849c5c7a00b1cd426695e498f1f9f75ade3e3a3f8636be49fb2f9c1323.15%
  • cc76768a2fdc64cb4116edd6ec35eaaeb6c3d9c9638f6b9aac0efa7b8ad902678.37%
  • 470f49ad125707b354af68600b85d4a867691e62595ca10a2606e54e2c183ffe7.39%
  • 19f1f74cf96886ac60b09e1c0c610e0bd86936686bc61a75a6a21560279146b36.9%
  • 52aa6ad3ac357075d8ff55cca5931cc8388966a840302a2b484c79f3c4d104d46.4%
  • 740eb29e6b8cdebb48f220fdc4889687fae533ce1893ec96b8f0ac46ee7091836.4%
  • cab5dcc079c1771636895970eb6819d759672552b4a8418aa007df07548855d95.42%
  • a030ee28a0b9b8960ad7c30c5595a9760030cf8260f258f6532839fc0b1805b24.93%
  • c8115587fe616ed1aaa7b172967267f20b91c79e3ec3e514e983f851169c45d24.93%
  • 654925f1372e54b2f40d886802dc453f9c96559bf9633b51142f57dafd352acd4.43%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about aswOfferTool.exe

Rocky answers questions about aswOfferTool.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.