» DAP.EXE
Overview
Analysis
File Details
Behaviors (1)

DAP.EXE

Download Accelerator Plus (DAP)

Speed-Bit LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DownloadAccelerator’.

File name:

DAP.EXE

Publisher:

Speedbit Ltd. (signed by Speed-Bit LTD)

Product:

Download Accelerator Plus (DAP)

Version:

8, 5, 5, 4

MD5:

c0eeb02fa0982edcaae03c611f631596

SHA-1:

16489a69a3423b233c1d4cc8736c38b0073fbfd0

SHA-256:

5bff01c3977ef164c1e5c8ff61cc909f94ad1438f74206f81183771b0f1c35ee

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/25/2024 1:48:18 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.Armadillo

0.98/18155

File size:

4.2 MB (4,376,328 bytes)

Product version:

8, 5, 5, 4

Original file name:

DAP.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\dap\dap.exe

Digital Signature

Signed by:

Speed-Bit LTD

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

7/27/2006 2:00:00 AM

Valid to:

9/3/2008 1:59:59 AM

Subject:

CN=Speed-Bit LTD, OU=SECURE APPLICATION DEVELOPMENT, O=Speed-Bit LTD, L=Haifa, S=North, C=IL

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

37A362770505CE72F645A9F4B52CAE78

File PE Metadata

Compilation timestamp:

3/19/2007 5:41:32 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

83.82

CTPH (ssdeep):

49152:NbcH4/17LLhVlx6i8hO84YzY4kszKz7c37/+KhO2g0g62x:KHi9Lh8i8hO84YzY4ksz61

Entry address:

0x2C5000

Entry point:

60, E8, 00, 00, 00, 00, 5D, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB, 0F, B8, EB, 07, B9, EB, 0F, 90, EB, 08, FD, EB, 0B, F2, EB, F5, EB, F6, F2, EB, 08, FD, EB, E9, F3, EB, E4, FC, E9, 9D, 0F, C9, 8B, CA, F7, D1, 59, 58, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB, 0F, B8, EB, 07, B9, EB, 0F, 90, EB, 08, FD, EB, 0B, F2, EB, F5, EB, F6, F2, EB, 08, FD, EB, E9, F3, EB, E4, FC, E9, 9D, 0F, C9, 8B, CA, F7, D1, 59, 58, 50, 51, 0F, CA, F7, D2, 9C, F7, D2, 0F, CA, EB, 0F, B9, EB... 
[+]

Entropy:

6.4425

Packer / compiler:

ASPack v1.08.04

Code size:

320 KB (327,680 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

DownloadAccelerator

Command:

"C:\Program Files\dap\dap.exe" \startup

Scan DAP.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.