home

dashlane_launcher_bfirefox-1452765510.exe

Dashlane

Dashlane

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Dashlane Inc.  (signed by Dashlane)

Product:
Dashlane

Version:
4.0.0.98750_dev_default_NO_TYPE_nolog_world_l_v8

MD5:
96fbb4e5589f331bec8844cf76ee9651

SHA-1:
054383da431e09cf115d3a01331601eaf4b132f5

SHA-256:
1b094dab6aa925070c666601ab78226f32ad8d77ed107914f7124f0c88a60744

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 8:52:26 AM UTC  (today)

File size:
523.8 KB (536,320 bytes)

Copyright:
Copyright 2009-2015 Dashlane Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\dashlane_launcher_bfirefox-1452765510.exe

Digital Signature
Signed by:
Dashlane

Authority:
Symantec Corporation

Valid from:
9/21/2015 8:00:00 AM

Valid to:
10/21/2018 7:59:59 AM

Subject:
CN=Dashlane, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Dashlane, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
570BBBED8EB96FE957CB53C822759FCE

File PE Metadata
Compilation timestamp:
12/27/2015 1:38:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:VBn9mmmmmmmmmmmmmmmmmmmmeQCcmmmmmmmmmmmmmmmmmmm4mmmmmmmmmmmmmAmw:VCy55PV+hOzasQdk0u+MYBEQqqj+QU

Entry address:
0x324F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 57, 33, DB, 68, 01, 80, 00, 00, 89, 5C, 24, 1C, C7, 44, 24, 14, 30, 91, 40, 00, 33, F6, C6, 44, 24, 18, 20, FF, 15, B8, 70, 40, 00, FF, 15, B4, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 53, E8, FC, 2D, 00, 00, 3B, C3, 74, 07, 68, 00, 0C, 00, 00, FF, D0, 68, E0, 91, 40, 00, E8, 7D, 2D, 00, 00, 68, D8, 91, 40, 00, E8, 73, 2D, 00, 00, 68, CC, 91, 40, 00, E8, 69, 2D, 00, 00, 6A, 0D, E8, CC, 2D, 00, 00, 6A, 0B, E8, C5, 2D, 00, 00, A3, 84, 3F, 42, 00, FF, 15, 34, 70, 40, 00, 53, FF...
 
[+]

Entropy:
7.8949

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file dashlane_launcher_bfirefox-1452765510.exe has been seen being distributed by the following 12 URLs.

https://dw.uptodown.com/dwn/86P9e9ijuHgPanMf0l5fOKuehOmLTPT-FJkTuEE-bVuyZqUCDo72DcSgISEekAPjEYjdscR-LFWhMjhcZERr3hzdGVUKUh4TAeAHDU5DQEpMI-whSPpd6F8R-E9GnzyU/zhCVCYFKXVjcFdKOgsiN31Puuf9IlzoQ3jwMkgspqvUNuEfYswMT98nFw1PGTA9APSOhGbkUzoYGDnT3ZD_74FsJzo8q0d9HNgYEFRm0zqdSN8EUMAhrOGntgZq8cnf5/.../

http://telechargement2.pcastuces.com/temp6bs2/.../Dashlane_Launcher_biexplorer-1452765510.exe

https://s3-eu-west-1.amazonaws.com/binaries.dashlane.com/.../Dashlane_Launcher_bchrome-1452765510.exe

https://www.dashlane.com/directdownload?m2dToken=01Zu0YqPzU1nxSAOl

http://dw.uptodown.com/dwn/cIP0Y_tTtb5gOuPvmefEe8TBhNgWOs2yES6CQ9dL5K__DahCOsZNg27J3ZkVOXh1aUcN6pVvPu9p6KubRk59n0Hjx1FybBZ4FmnGQCiWRbD9QjKFNtvpdkenDzaoFigk/N3K6KCLRliwt8Ee2uSLAxd62n6gtt7etkNf_DR1GUmWOZrX70UUVn5i6yyh5w8Ao_gYwgBlMtEykpg-85dBctJ75QgZGJ61_gzXRK-EfLykbzdZEzvWTWquBDo3s2DIa/.../

http://dashlane.softonic.com/.../trmsvRChbxdrflJq3ZIylWvK70YmPi91jOyzJvngz57LcOvxXCN3tSozxehIgEZmVD8p6IdT lUABbQ004SIeZRxdsJM3AqX5kXE1yahT4jhNt2BlCmgl111nWaesAqox5rz6Gcjo82WVVAzy ETiew=

https://www.dashlane.com/directdownload?m2dToken=0kY2XH7rjv7uvyRoo

https://www.dashlane.com/directdownload?m2dToken=0EizFW1ZVIwam8vSH

https://d3qm0vl2sdkrc.cloudfront.net/.../Dashlane_Launcher_bchrome-1452765510.exe

https://www.dashlane.com/directdownload?platform=win

https://www.dashlane.com/directdownload

https://d3qm0vl2sdkrc.cloudfront.net/.../Dashlane_Launcher_biexplorer-1452765510.exe

Scan dashlane_launcher_bfirefox-1452765510.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.