home

invsetup.exe

Inventoria

NCH Software

This is a setup and installation application. This file is installed with the program Inventoria Stock Manager. The file has been seen being downloaded from cts.vresp.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Inventoria

Description:
Inventoria Stock Manager

Version:
3.47

MD5:
b278df5d272d1bf17951c1bb33062194

SHA-1:
b08bff9e8017d0537d2d7a25319ba8ab35d6c79a

SHA-256:
52e38d44c549adb313640df98a36b972954ca41a4a2cd3ac3fb7652ee8734c0d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 5:53:27 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Google (variant)
8.9701

File size:
685.1 KB (701,496 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English

Common path:
C:\users\{user}\appdata\local\temp\invsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 2:00:00 AM

Valid to:
8/8/2015 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 6:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:fd7os5qPFh0jNDnm+jrvs371cULq6PznJyAbpB6Ne90LxCrYJKudDDVA:NJ5q9h0RrwWU++vCKgDDu

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file invsetup.exe has been discovered within the following programs.

Inventoria Stock Manager  by NCH Software
During installation the program will offer the user to install the NCH Toolbar, an ad-supported web browser toolbar.
www.nchsoftware.com/inventory
26% remove it
 
Powered by Should I Remove It?

The file invsetup.exe has been seen being distributed by the following 2 URLs.

http://cts.vresp.com/c/?NCHSoftware/4e5bc6d73c/ab58cda5ef/.../ref=nls132WB

http://www.nchsoftware.com/.../invsetup.exe

Scan invsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.