dvafznlp.exe

arsenal

IT TRADE

The file dvafznlp.exe by IT TRADE has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Emirates  (signed by IT TRADE)

Product:
arsenal

Version:
112.47.14.333

MD5:
bd0a78dad86d81de578544c068781324

SHA-1:
8d6655df7e199116634593eb083fa57790655e8d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 5:26:55 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Amonetize.ITTRADE (M)
16.3.7.11

File size:
705.2 KB (722,097 bytes)

Product version:
112.47.0.0

Copyright:
Fly Emirates

Original file name:
fly.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\dvafznlp.exe.part

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
2/26/2016 1:00:00 AM

Valid to:
2/26/2017 12:59:59 AM

Subject:
CN=IT TRADE, OU=IT, O=IT TRADE, STREET="bul. Chokolivskyy, 19", L=Kiev, S=Kiev, PostalCode=03186, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
73C25C35CCEFCFCA8B0D962BF10D67E7

Remove dvafznlp.exe - Powered by Reason Core Security