home

dao-vang-setup.exe

The application dao-vang-setup.exe has been detected as a potentially unwanted program by 5 anti-malware scanners. The file has been seen being downloaded from b.position-title.xyz.
MD5:
96ed87206a9ea99a16ddc78cd3a359a4

SHA-1:
9c8ee8a6c044889dcab31f0ac1b62feeec0a3189

SHA-256:
421c84ad23d480d5dcd6de9c6e727b0c0d392fc71388dd523cb3d3134c3928f8

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
11/30/2024 11:05:50 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:FakeDownload-G [PUP]
160518-2

AVG
Adware Generic6.ARFO
2015.0.4604

Emsisoft Anti-Malware
Gen:Variant.Razy.6219
11.5.0.6191

Norman
Gen:Variant.Razy.6219
28.05.2016 15:32:18

Reason Heuristics
Adware.Generic.AT (M)
16.7.11.18

File size:
1.1 MB (1,116,951 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\dao-vang-setup.exe

File PE Metadata
Compilation timestamp:
6/9/2012 6:20:43 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:VJZvAeYsUTtzhu25b87B/WqFidLHS46ejlJdNfj:VJKZcsb89WqITZ3

Entry address:
0x20C3B

Entry point:
E8, 87, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, C8, 5C, 00, E8, 8F, 17, 00, 00, E8, 54, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, 1A, 12, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D3, 06, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
2.0176

Code size:
151.5 KB (155,136 bytes)

The file dao-vang-setup.exe has been seen being distributed by the following URL.

http://b.position-title.xyz/hp/?q=r3tbE0QEzwW1EefABCV5LbAiqmbq6DJG8HtP7LZiuRw5eTUdwAOJTjY8M inlgMEYSsZNMB0iZCN0m7AbxYfEgHJAeeuGBQ7Kj7oo4E2IH5XxqWQpD7ecOWlGz0XKusMmFJTFZHNuv7OL1Y8a O8fjB5wpYzQdgYZJcsdomjihjyG/MjYBC2ckPo18QRsooiEBtrk9stRWMZir xTv8lEsdJpLsFJ CuATHt5bfRe0wrElDNarkv0ziaOarPLSI29rD11E8MPr7NJtMqb2QJ5xeRzMs0IwXykuJDkwWzaRCmSJFdD0rsc7UhyTqpRhl79EWY8EkEn2x0ezagUnJWLUjCTViXzCnMj9UtSb35PrOUXYq6q8Pn1JFKTpRPLD7HGsIJ 3bf6yl549Mnnk2chgm0qTz7gS jyq0 Xv0QfeCtFjWVBGBhK4oRzA5L2H6WkFlEPLmHZJ3w4UrF5bC1vHfjXwp8/.../0QRWmKQFZxcsybW54b27x96wzYM&external_id=1431600659524591014&uuid=Gxbss21hzD1XjivOC0fEuJD9hv9lUP7thIkUuhYWfet7qd0ENx8sKjQQ2XEaFDcvmOR8MXcFTOw7gVqdFxFEiJchtRAXb3ouShyPusl3hIKrKshLiTfPZMA77lfrPuOliLezRAfPHH0wKXF52r2equSPxMIfSigcUMjcSW32H1eKimCwN6flRxRCXcvWNlM9bMONXoCFUZzKJegFFIDl2JnTg1Y8YOr1P4XptoVIcpFxToIv4SjT7fE95CE1IBYyB6eMyS4JL6YGKHNC

Remove dao-vang-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.