home

allproxylite.v.1.0.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from very-soft.com.
MD5:
01641eb99ba56eeba8ae5e3af5f4a6e6

SHA-1:
f674be79526ecfa23d9a86ee488ceb3df001611e

SHA-256:
87e95edbfeb351f6b6fc2383d3ac4c5fb7b2923ba3677f62888dfe7303bbd0e6

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
1/15/2025 7:19:07 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Win32.Sality
t3scan.2.0.9.0

Quick Heal
(Suspicious) - DNAScan
7.16.14.00

File size:
4.8 MB (5,084,748 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\allproxylite.v.1.0.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:ieVL0Khl7zXi3xu89LH066e3At1iLC3QFiKPHWsPfirlaHH:5qKhmvU66ewtrKPDfWlU

Entry point:
50, 4B, 03, 04, 14, 03, 00, 00, 08, 00, D9, 6A, 53, 3E, C4, 67, CC, 6A, B2, 95, 4D, 00, 00, 56, 54, 00, 1C, 00, 00, 00, 61, 6C, 6C, 70, 72, 6F, 78, 79, 6C, 69, 74, 65, 2D, 31, 2E, 39, 2E, 35, 37, 38, 2E, 36, 32, 38, 2E, 6D, 73, 69, CC, D8, 05, 50, 1C, 41, 16, 00, D0, C5, DD, 3D, 09, EE, 2E, 41, 83, 3B, 2C, 12, DC, DD, DD, DD, 83, 05, 0D, EE, 10, DC, 25, 68, 70, 97, 00, 49, 70, 09, 9E, E0, EE, B2, 40, 80, 9B, BB, CB, B9, D4, 49, 5D, D5, 35, F5, F8, 3B, FD, 67, 67, 7B, 7E, 4F, 6F, D1, 4C, 8C, 63, 7D, CF, AF...
 
[+]

Entropy:
7.9984  (probably packed)

The file allproxylite.v.1.0.exe has been seen being distributed by the following URL.

http://very-soft.com/storage/distr/.../allproxylite.v.1.0.exe

Scan allproxylite.v.1.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.