home

ddav.exe

digital-defender Antivirus

UtilTool Limited

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
digital-defender  (signed by UtilTool Limited)

Product:
digital-defender Antivirus

Description:
This installer database contains the logic and data required to install digital-defender Antivirus.

Version:
3.3.52

MD5:
bb9094f64fb4e26ece6cdf1310831ead

SHA-1:
a471f9eab5b93d8851497305193834ea27ae791a

SHA-256:
4785e81995aeeeb342504aac3388cd58e73991d08855f4493c4e25235509751c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 9:15:49 PM UTC  (today)

File size:
1.3 MB (1,415,432 bytes)

Product version:
3.3.52

Copyright:
Copyright (C) digital-defender

Original file name:
DDAntivirus.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\ddav.exe

Digital Signature
Signed by:
UtilTool Limited

Authority:
VeriSign, Inc.

Valid from:
12/6/2012 1:00:00 AM

Valid to:
1/6/2015 12:59:59 AM

Subject:
CN=UtilTool Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=UtilTool Limited, L=Gibraltar, S=Gibraltar, C=GI

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D3C408F5BD24F32AAB1DB8752D7DE2C

File PE Metadata
Compilation timestamp:
3/1/2010 11:28:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:Aupp6tQ35Sv+a5EVc+a5Eh+a5Eo+a5E0+a5EK+a5E/+a5Eh+a5EJ+a5Ex+a5Ep+1:AUp6tQ35Q+a5EO+a5Eh+a5Eo+a5E0+a5

Entry address:
0x23CFA

Entry point:
E8, F8, 5B, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 83, 65, FC, 00, 56, 8D, 45, FC, 50, FF, 75, 0C, FF, 75, 08, E8, 6F, 5C, 00, 00, 8B, F0, 83, C4, 0C, 85, F6, 75, 18, 39, 45, FC, 74, 13, E8, C5, 0E, 00, 00, 85, C0, 74, 0A, E8, BC, 0E, 00, 00, 8B, 4D, FC, 89, 08, 8B, C6, 5E, C9, C3, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, 56, FF, 75, 10, 8D, 4D, F0, E8, EC, FC, FF, FF, 8B, 5D, 08, 33, F6, 3B, DE, 75, 2F, E8, 8F, 0E, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, 17, 0E, 00, 00, 83, C4, 14...
 
[+]

Code size:
197.5 KB (202,240 bytes)

The file ddav.exe has been seen being distributed by the following 21 URLs.

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_es&type=PROGRAM&Expires=1441013627&Signature=f-~gl89yhrKvCGpb50NzsOvMmsiFC3RAMqzw78trrk4aFEDcMZqUf092uEhlITHK2xQHOX1OdOF6yYT1ubCeYyP907FlxouODe-6EegNz0eCMIqK~N6NjkuyNGWbyo2pXudEfheQq~KcLr6Ra166i6ohbS1sgdZDh9WtRQmrYDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_es&type=PROGRAM&Expires=1443433309&Signature=hDXWykMi8O~CmKU~nnvgKlwth5ef7WaMfuO0~boG8A0k8Q7eCxbJlD-Kqq7Rg2tMV17HHkRa~nd4uyZjYfRmtbFSCXhKbHK6mIOwTdFH-iEDDEXCrl-KeSm1apy3suY6uji41hizxSXGiE9Ai312g9BB8QVYQITRgm3h8046JkE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1440314987&Signature=XtsVi~I4o7o5WGFCbV-K5zPGHqWLGJDS3BnPkZDbDw20EPZoyUr5NBuRqn2pMZGc60QcryKCCKMV0gW5w-OjQ1dmIUZDSzPjLhjbDVFBmZ-UgfQ6ZhqL6OMFb5fx7xHgnXp03VpXdyqVY2ILpVHw0usf~rGzrwULf-aI31-gLUU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1437243373&Signature=ZHCWi2MGUpLEjK5eVo8606RM8QXwNY94gGbXTF-bFwEjPM9PlQyGwIjK3lCi16C81UKNPTLZ6x0iahhxkJAgJmeHQ2dk0EMydFxIjDVxXiss5SiBgV4K42tvrtv0Xu-6h1qyEehErpZcGWpixQxvwGML73XKEuEMDYGSlApU4bQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1448480760&Signature=Mm2mL4zi11efepsDs9SoBVyQoABCicoeitFnOtI0CqtKxPqb5bXc17tSjob3qh1adAA~n-SCEi5v8~HWHiIx49sgJXQfA-15m1cqqgGqwp1kNZULXC2aLtOUFxnRbObCsY1iQic9lBalnQYRBtxhnGFxHzFos~JgChuApU-rqJg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1450147777&Signature=W6HYLOF8V10iS~GBAeqVf6iyAnS9JvoMWQ9ksMqy~VqmEA8B4lCthkSXt-AeW5ovmAPADgsDmqjsa~AbmqtPjQrNWeFxWpUu7K7DFXwJn6GseiDEjIh~yEg6yZsMGaPliNpNJRBtTpf07VtN~ldBNJtQnlfnO4l1YVvmEvUCnKY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1447294136&Signature=imqD5mA8FREyOjz9-KZQfVOcuX~WLx7w~fMmxV3CD7oNqBVT0m0DXYOLEmlZ-cHOa7oK9wJy0RNuw6~bF3dgs0Jla7s2HtSjuLo2cd0-3cr4bbITAAQFMpHpKXCsBmeWkrB4u73SdCLYZEWCkLAlyVtNz9EZplZimHRbhyC4H4w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1460330617&Signature=KMNJCr1iEcgDW8JABhwJ5iq~4qZBckBVUkPgW0zwHEwbC0IuCIY7LhSbXrFzdDqW3t4qinFJd-3~w~FynE3NIGLHXFnbldKsWkwSwZcRENNursXHcIsAu-nGT8x-FkLBpwxqAIfKdDcFS5m39ZNjYeL2mle3kUi~VoW9FjLD3rs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1458682335&Signature=HhYeT6df80lYXH8KZVcZJuqPDsNqQbjLbOKzljv3mcU4RUIVNv8-pvV9IeGfQrmQeiXG-Y6jVXHws4iAsVnfrjjCCEjNK3RePXY3J1I6Treneit1y3IDEskqLzkzjnl3ZjZMi3wxt8~nbPmaofx7Dl77rfXGAUsdWUyKyJSOIf0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1446561524&Signature=BIqK25DRXyhQeLrGr7F1Az9zKmiCy-j1Ce1wak-iWkb7yS6idkd0LUpv1qR6k4ejClVIch1a7ZONiPL9rZtw-VCxyJ1MfY23MG2569~CAatMA0xJ~X6xNO3XeGfSG4ADqb89bRE0K2Dq4JnAT5rwkoJm2p6Eh0n2eAeuojmbBjs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1433355406&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=QqnFBEv6D4lD2ytaB9CwjmBU4FQJgJIyy0S0qwPQC6~W917RoeBSx8TvY7TFCA919ocq58Y-2hmy8detYhSyuMKXH8ZjbDiHpaP3zLJ9UWjXZvcC2aL11Qwo8yoS4hQ4Hh-nmqpnmfxoM49O-1DmUojE5pxmGUaRRbLONAK1pGc_&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1455483566&Signature=Oj7ectG2bvKRDHCKNLBfIaczccO7WLmmRrzb-28trZAIRy1ElhMVVMKbCvGmgckyvLUMSb6Rx-ZMveWEX5~jHldRMwxlL9s8t7uz-v9xBjKgeAdVyRDu2bd4igkcRc6z~lYWNd29dNyyvrafAvIg-lm5NK5P2ql6AjzANg7I1h0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1450306200&Signature=AC6Chbh5DQGkshXEuWxIpm~M1gIfbNWMkaD6vCyM5KVDOsLF8oA93CkVAO~ZEp-65EkTJ~CtzDZLEK0zHPWyBHSWRnQP-fWsRDVtikmm4Q6BNAmm~VgI4AozeOyOhZaco5X3DQ5THFAB~veLVUtCGt13zP2WmV86j9ftr6wrLn4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1446791636&Signature=f0jMpz-KEV-uJ5fVbhu50pEB~vN-h02Kp4UnfnTQFmWh-5MsrPZ2P7fv5MemSEMwQuWpxLmunEWGopwXcqAqfiJ6lSds8QfMkio6CHtEXvQIWkGKiK-ZsrKPcXXgZHrlVWdyCQqmgPJUqmZH-PQ~qU1Z8wMz7gmMz27KE-3fVME_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1450039619&Signature=IPDIcCyE4KtMVr6YHJWCspy2DJShEbXlZViJdYuybYTpcBsrDc1rQKsiv5dQDycMMhW82~aPeFBfrxEfPnUeKdGDK~SFpAdZ3TlVuNlCbChMr1ILNTv4keQ8ejJnCQY21TOpGwMUdQd~4J5R6vkr2RA6XAiNAkI96O8uBTbLnwg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1449447876&Signature=FnqpjDl6K5vcm8TR3JZDku2Z1y5nWgtzBVz0A4BTe7Wey28nuqpXSvWBdgYOddkKzSnuFElrIZR0XoWW2bLejaF4jsCqtdy2OIp5SveK-y0SSBzIsfRnNCXRgcDJKVpTCiwUkGY3zPvrk6heMSbtF1L658IrWPh5Bct8jZVy68E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1444022634&Signature=gGunxM3eyTu0Da9c26QQpa0Ggkd4g7987zxENe3QT2ZE2hEmQ-f13ZbfBv1~WDcUVlXL4AdpvzXTUKv0JrxpXFfIvKrCwZLv6U6SzoHYHwl3AL3S8FgzFa1LD5t4xXHqocX9y9-ubUyVZ8g9WcxOaKcA2I5LHBzezSIXfuqkLvU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1437150701&Signature=POV2i85cuTjy53sSPwToXwIGrkRfvNSH-Hr2Vch6LF-B494~wUxqnJorIEWBbJugmoB8r10egekMnOkwokOT-oBq-mukwuzHe3A5DCZdpJE0kcf5jAesX5p7LgipyTDNUXroEQ29mNuw0hc3DKVRb5V8KsMK51HWktFEL5Jkb0c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://gsf-cf.softonic.com/a47/1f9/.../file?SD_used=0&channel=WEB&fdh=no&id_file=95236&instance=softonic_en&type=PROGRAM&Expires=1436686878&Signature=Ndwcx-DDlG4-qCPF3-Lc3n6pBW6c0sIUvuakjYTi~ustnNVoLwUuumGLQB1EsoGBcBaTkhmAU1wXIdlPGyfKz8ohqTQkBfdK26qGfspU50pc8n8B4BGDi3zN7jelzFlMWo9Jn9uGlbdGsILThhZ9IW5AKJbJBLOcp3KpXkHq6o4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ddav.exe

http://download.digital-defender.com/.../ddav.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

Scan ddav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.