home

daemon-tools-4-45-3-lite-es-en-br-fr-de-it-cn-jp-win.exe

The executable daemon-tools-4-45-3-lite-es-en-br-fr-de-it-cn-jp-win.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from dw3.it.uptodown.com and multiple other hosts.
MD5:
a75c93f384c597995fdcccfcf5e26d89

SHA-1:
68257c45a39377d1b1cc143298fe6f069ca4465e

SHA-256:
19e8953d92895fb24dcc7a65472186c4f8a6fa49ad252cb411b778691bfa6087

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/27/2024 7:37:44 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.18.0

File size:
689.9 KB (706,463 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\daemon-tools-4-45-3-lite-es-en-br-fr-de-it-cn-jp-win.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:CsZfDKT3OUm+GqEgb8jN+1Cet5Mqc2AvFqgHs78+sA+kl3xmPmeh4H7E+BVwWaM1:CiGT3PLpEDjNUCWc2MFqOV+9+Q4PmGWr

Entry point:
91, 78, 12, 11, 03, 00, 00, 00, 01, 5D, 00, 00, 00, 04, 84, 7F, 1F, 00, 00, 00, 00, 00, 00, 66, 80, 31, 1B, 43, 44, 9A, 35, F3, BC, 4C, 10, 12, 1E, 25, EE, 27, 8B, C1, 53, 26, A5, E5, D7, 02, 60, 41, 07, C8, 6E, E0, A0, 04, FC, FC, EB, 7E, 75, 7A, BA, 6B, EB, 48, C8, 20, 56, D4, 36, A2, 05, 43, 6C, CA, AF, CA, D0, 15, EA, C9, 5A, E8, E1, CF, FA, 2C, CA, C6, 96, CD, F8, DB, BC, DA, 29, 2B, C9, 00, BD, 6E, 59, 39, E1, 59, 16, DF, 0E, 46, 8C, 80, 02, B9, 20, 0A, A5, D3, 96, A5, 46, CC, F0, 88, 5B, 83, 46, 72...
 
[+]

The file daemon-tools-4-45-3-lite-es-en-br-fr-de-it-cn-jp-win.exe has been seen being distributed by the following 4 URLs.

http://dw3.it.uptodown.com/dm/3/1376512939/7912107fa12ae279516a2379fdde54da8f5c2a5f/.../adwcleaner-2-306-en-win-setup.exe

http://afr.download-stream.net/?exe=http://dw3.uptodown.com/ic/dw/adwcleaner-2-306-en-win.exe&language=EN&title[es]=AdwCleaner&desc[es]=Elimina cualquier adware de tu equipo&title[en]=AdwCleaner&desc[en]=Get rid of any adware from your computer&prt=uptodown&icon=http://img.uptodown.net/icons/dw/adwcleaner.png&screenshot=http://img.uptodown.net/screen/windows/babylon/adwcleaner-1.jpg&download_url=http://adwcleaner.it.uptodown.com&version=2.306&chs=2e11edc749c6193ed6ded9a2682d9c0b5dde63cc

http://dl.cdn-services.com/site/files/autoprtnrp/.../adwcleaner-2-306-en-win.exe

http://dl.cdn-services.com/site/files/autoprtnrp/.../daemon-tools-4-45-3-lite-es-en-br-fr-de-it-cn-jp-win.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.