dvafznlp.exe
arsenal
IT TRADE
The file dvafznlp.exe by IT TRADE has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Publisher:
Emirates (signed by IT TRADE)
MD5:
bd0a78dad86d81de578544c068781324
SHA-1:
8d6655df7e199116634593eb083fa57790655e8d
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
12/25/2024 5:26:55 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.Amonetize.ITTRADE (M)
16.3.7.11
File size:
705.2 KB (722,097 bytes)
Product version:
112.47.0.0
Original file name:
fly.exe
Language:
English (United States)
Common path:
C:\users\{user}\appdata\local\temp\dvafznlp.exe.part
Authority:
COMODO CA Limited
Valid from:
2/26/2016 1:00:00 AM
Valid to:
2/26/2017 12:59:59 AM
Subject:
CN=IT TRADE, OU=IT, O=IT TRADE, STREET="bul. Chokolivskyy, 19", L=Kiev, S=Kiev, PostalCode=03186, C=UA
Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
73C25C35CCEFCFCA8B0D962BF10D67E7