home

daemon tools lite.exe

DAEMON Tools Lite

Disc Soft Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s6377.chomikuj.pl and multiple other hosts.
Publisher:
Disc Soft Ltd  (signed and verified)

Product:
DAEMON Tools Lite

Description:
DAEMON Tools Lite Setup

Version:
10.2.0.0112.0

MD5:
4846f77fcccdb5aabcdf7694c3efaf79

SHA-1:
c3277ba017057049934322e9d45f64e45556dc7b

SHA-256:
06c2c8ea5e3fe0633815963d7fe5d514d98fab21898ea808ef2e1ce428810edb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 8:56:54 AM UTC  (today)

File size:
23.2 MB (24,365,304 bytes)

Product version:
10.2.0.0112.0

Copyright:
Copyright (C) 2000-2015

Original file name:
DAEMON Tools Lite10.2.0.0112.exe

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\daemon tools lite.exe

Digital Signature
Signed by:
Disc Soft Ltd

Authority:
COMODO CA Limited

Valid from:
5/25/2015 9:00:00 PM

Valid to:
3/9/2018 8:59:59 PM

Subject:
CN=Disc Soft Ltd, O=Disc Soft Ltd, POBox=P.O. Box 2284, STREET="16 Albert Hoy Avenue,", STREET=Belama Phase 1, L=Belize City, S=Belize, PostalCode=BZ, C=BZ

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F6E3D0098BF4E24D22BBB9550C55343E

File PE Metadata
Compilation timestamp:
4/10/2010 9:19:31 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:GHAADd7bKH1kW1D2ejJj6DhgPDXnBGhHTshAkp4RN86U/8WhRi2xGnV8j4hPcx81:GgkKLDpjJjahgPFWshAkp4RVUzs2EneS

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file daemon tools lite.exe has been seen being distributed by the following 25 URLs.

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7oUgsI0JsZC4cSNN-Vh_vN1wA8jMawxZIVG8x5pgkxXoesWj6yjZ26xo9oUILQutwEXX7VWbfl7vj5x0sraMeI8hyViMTbYmeoxBB567fZnYy4usu8seu_8aiPnY-t4eFw&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7pciWU1zosrKXHHk-JDz_pn7_cgGGqzhBs0S9iH_lmIRFf9kuv7iaQbFgeirwia5ph5pY7aFvOIQ606oLFY-al4jUA2BwM_ZT64Q1k-1S-JYE6kJLs_HTwAY00PbOarLPs&pv=2

http://i.download.idg.pl/fannef/58ffa00749a3d2999ed3ef625ed6d7e3/565f61bb//vol2/w95/cd_dvd/.../DTLite1020-0112.exe

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7o-ZH_nBa5MFdYbE3w5QPnmNzNyR02BjdCCu9po_UQHqIzwAYfuuiJjdj_CuJHLGrjmo78FyEAbZe3ccZQ268avTaOZzVmUOeaz9MSdid3nxwCtAc9lBs118YXRG06_5WM&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7pYS11lx1c4LXqF8QBeKodLQgyVJ90JgTazwW59T5O2y5BgN5d8U7WrntL5AR2MnviYxYwCiIMKwi1FVmdf4tMg1j3xFK7XYhG9gYrQERqKAKFvlI_YpoK2fRI3vGUmIgY&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7pwvliNnQflBQz5PTTIWLsYIeHLMf03SC3wY4SvSCg4MghuWEso6_T3Ol-uiDFezLiNIzh6OLQ_u9xe5N-A5dv3m6VgIfcEhP4Cwj_s8mmhk6BX4aL5LOb9gH1dQ82rib8&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7o52XaGOnLjnvswxaZeNvABXt_pNITr1hDNTLDB3HpnNOKlWc-QOkq2a2QCxu4HghhD0wJnCYzplzY5riUHItgauyct5u6xREji_lKa90sJcCjBxfYAUMSU38R0G_R854M&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7pC1fGyroLF_Fm4YTfMYFuF3uwxYbt_TD0L5TMajgFwmxOKyyeYwYAzN_haR57lQyqgjR2XORRznOPeXLWIfZ5-BrKj53C3X0uuXWIEdg9W2m91KlA7Y9cZoeSGHT2hEJo&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7pljtip5nce4NbU1azi9IRyWxAwBTPU8K064Jc954GImd0jKxONFrXH0ZYbu167lU64ZDNjx6jZ69SBoy5JOGlTQ4hW6XYpQHvzVmWt9NEqQaQdyrBvq0sXl8dV4BmlTPA&pv=2

http://s6377.chomikuj.pl/File.aspx?e=ySNNn59PypiBylwhlfkndCD6vakFTgxoty-UVMfUE7rFuuzjXQMGCYzczl29q8MpJLuZy3Bt0zWY_-n1dy8dsqbrThOIQAbD0jHEkt7w2O43lNmnMl6VEqzuHTYOFi_7XX7ZmrniU0nE6ZzrTA4_7dx3eP5NboAwf6-w32FQAgQ&pv=2

http://cdn.instalki.net.pl/windows/narzedzia/1f15fcf5421eecd6ca1b61337c319495/.../DTLite1020-0112_www.INSTALKI.pl.exe

http://dl-vip.appstore.baidu.co.th/.../DAEMONToolsLite-10.2.0.0112.exe

about:internet

http://i.download.idg.pl/fannef/79da78aa1948c9f52d83f0ca62167585/564e2bc1//vol2/w95/cd_dvd/.../DTLite1020-0112.exe

http://dw.html.it/index.php?softname=daemontoolslite_10.2.0.0112.exe&code=1454060242&q=OTQzNzN8ZGFlbW9uLXRvb2xzLWxpdGUtMTA=

http://i.download.idg.pl/fannef/8451ca2689a1ecd5f18b41b0c6223a37/56532ff8//vol2/w95/cd_dvd/.../DTLite1020-0112.exe

http://i.download.idg.pl/fannef/6b054100650d6f714f18b73aa334853b/56522bd0//vol2/w95/cd_dvd/.../DTLite1020-0112.exe

http://download.softpedia.ro/dl/33722d9c70db76934d5557820bf61f3a/5658a394/100005319/software/.../DTLite1020-0112.exe

https://mega.nz/temporary/.../MQ1BQTCJ

http://dw.html.it/index.php?softname=daemontoolslite_10.2.0.0112.exe&code=1453691140&q=OTQzNzN8ZGFlbW9uLXRvb2xzLWxpdGUtMTA=

http://download.softpedia.ro/dl/ee1f216075116c6e5c193e92425c9c91/5650dd68/100005319/software/.../DTLite1020-0112.exe

https://s3.eu-central-1.amazonaws.com/.../DTLite1020-0112_www.INSTALKI.pl.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

https://storage.googleapis.com/.../DTLite1020-0112_www.INSTALKI.pl.exe

http://turbobit.net/download/redirect/F86AA974634643BFF7959EE456AEA917/.../DAEMON Tools Lite 10.2.0.112.exe

Scan daemon tools lite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.