home

dots.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.vnschool.net.
MD5:
ff98611732a00538276948ba07f26cec

SHA-1:
cec07d25392a60de1f3e540c2c0cc66ee263027f

SHA-256:
30812c9875ca119e0d7bcf675b487240b9c5af8ad2e91167330079305ca97ef8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:48:16 PM UTC  (today)

File size:
72.1 KB (73,840 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\????? ?????\dots.exe

File PE Metadata
Compilation timestamp:
9/4/1983 12:18:52 AM

OS version:
86.15255

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:ncLIM18H+bHApNxZVTJpPwoTYWGvRfYNUivz8MPoWDIn85XrYc+BNI93J0CxbDKP:cLd8HoHAXjVEBZTir8MPzMn8pm8284

Entry address:
0xDC00D6

Code size:
192 KB (196,610 bytes)

The file dots.exe has been seen being distributed by the following URL.

http://www.vnschool.net/download/CHTH/.../DOTS.EXE

Scan dots.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.