home

Setup.exe

ODM

INSTALLER TECHNOLOGY CO.

The file Setup.exe, “Open Downloader Manager” has been detected as malware by 1 anti-virus scanner. The program is a setup application that uses the Nullsoft Scriptable Install System installer. This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser.
Publisher:
My Company  (signed by INSTALLER TECHNOLOGY CO.)

Product:
ODM

Description:
Open Downloader Manager

Version:
2.0.0.0

MD5:
62ec6a8e49b828f901fda0e479e46f06

SHA-1:
22186b8f5457dec476425ec8cd733bf2b90e9ae4

SHA-256:
39fa0cd1e582fcbc634948aa17a61dfb4c7154b88ea8becc71746c17fd77096f

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/25/2024 1:22:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.8.5.8

File size:
292.9 KB (299,896 bytes)

Copyright:
Free Author © 2013

Installer:
Nullsoft Scriptable Install System

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
INSTALLER TECHNOLOGY CO.

Authority:
VeriSign, Inc.

Valid from:
10/7/2013 8:00:00 PM

Valid to:
10/23/2014 7:59:59 PM

Subject:
CN=INSTALLER TECHNOLOGY CO., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=INSTALLER TECHNOLOGY CO., L=Miami Beach, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4556C69814691A6077AE1628567ACB9F

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:UvpgLjks4MD4frcgZvY37sbKN2ja89jn+89e2HB3S:Exs4pTcCFmNp8Fn59e2HB3S

Entry address:
0x30CB

Entry point:
B5, BA, 27, 44, 49, 65, 65, A7, 30, 42, A7, 32, 95, F5, 28, 20, BF, 60, 83, 0E, 33, C3, 1F, C7, 07, 6F, CD, 4C, 66, C9, 5E, D9, 4C, 13, 37, C0, 37, F0, 66, 23, 01, 50, DB, 5B, 7F, 11, 70, 29, B7, 8C, D8, 84, 02, 65, AE, 59, 4D, 76, CB, 4A, CD, 4E, 78, 79, 75, 95, AB, 42, 5F, 83, AF, 74, 18, 13, DC, B8, 99, BB, 78, 59, EB, 74, EA, 04, 72, 9B, 17, AB, 85, E7, 2C, A6, C4, 0E, B2, 45, 86, 13, 0B, 73, 99, 37, 11, 1F, 3B, 80, 3B, B4, 5A, 77, 58, 71, 95, C3, 63, 3F, 04, 4F, 90, 8D, D8, 19, C8, E5, 6F, 91, 78, 70...
 
[+]

Entropy:
7.8289  (probably packed)

Code size:
22.5 KB (23,040 bytes)

Remove Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.