home

dap10_dapff.exe

Speed-Bit LTD

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with multiple programs including Download Accelerator Plus (DAP). The file has been seen being downloaded from software-files-a.cnet.com and multiple other hosts.
Publisher:
Speed-Bit LTD  (signed and verified)

MD5:
89640ddca75b3765ab80f9b40822d24f

SHA-1:
02ba15c4020506b38d5b5b832d1435a41b962bd3

SHA-256:
9959b3829de81b7944f6267238ac097b4ec93b46a0bc19180ad69ee991665a15

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 1:59:16 AM UTC  (today)

File size:
2 MB (2,070,808 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\dap10_dapff.exe

Digital Signature
Signed by:
Speed-Bit LTD

Authority:
Thawte, Inc.

Valid from:
7/26/2012 1:00:00 AM

Valid to:
9/4/2014 12:59:59 AM

Subject:
CN=Speed-Bit LTD, OU=SECURE APPLICATION DEVELOPMENT, O=Speed-Bit LTD, L=Haifa, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
699AEB21842CD56CA7A7FC71BB394361

File PE Metadata
Compilation timestamp:
2/24/2012 7:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:ia2aWfsWVrTY3LTsJRSwUB6CZA6zM/GGXzjlP/VF1EC9k:2jrQEP6PZA6zMbzB/j1/

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file dap10_dapff.exe has been discovered within the following programs.

Download Accelerator Plus (DAP)  by SpeedBit Ltd.
Download Accelerator Plus (also referred to as DAP) is a download manager for Microsoft Windows. It uses multipart download to increase speeds, creating multiple connections of different file segments to speed up downloads.
redir.speedbit.com/redir.asp?ID=7064
22% remove it
Internet Download Manager  by Tonec Inc.
Internet Download Manager (also called IDM) is a shareware download manager. It is only available for the Microsoft Windows operating system.
www.internetdownloadmanager.com
30% remove it
 
Powered by Should I Remove It?

The file dap10_dapff.exe has been seen being distributed by the following 3 URLs.

http://software-files-a.cnet.com/s/software/12/98/25/.../dap10.exe

http://downloads.speedbit.com/dap10_dapff.exe

http://redir.speedbit.com/redir.asp?ID=7411

Scan dap10_dapff.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.