home

webcompanioninstalleroc141001-0506.exe

Web Companion Installer

Lavasoft Limited

This is a self-extracting archive and installer. The file has been seen being downloaded from downloads11.lavasoft.com.
Publisher:
Lavasoft  (signed by Lavasoft Limited)

Product:
Web Companion Installer

Version:
1.1.987.2028

MD5:
e09acae278da44c9b0992481750c794a

SHA-1:
0cdcb0518e73c110e37976d5dd5426c781030d17

SHA-256:
f78288b5c985298f9c96b24d26edbc91be3591bb586aa9df75b4e585897ef32e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:47:16 AM UTC  (today)

File size:
7.7 MB (8,079,664 bytes)

Product version:
1.1.987.2028

Copyright:
c Lavasoft Limited. All Rights Reserved.

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\how inc\1c915c389b24497087196f953dfe27f2\webcompanioninstalleroc141001-0506.exe

Digital Signature
Signed by:
Lavasoft Limited

Authority:
Symantec Corporation

Valid from:
2/19/2015 4:00:00 PM

Valid to:
3/14/2017 4:59:59 PM

Subject:
CN=Lavasoft Limited, O=Lavasoft Limited, L=Sliema, S=Malta, C=MT

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
35F57ADDEF0015E6FEBE6AE2710D4873

File PE Metadata
Compilation timestamp:
4/30/2015 7:48:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:ODtczEjKyDGPuGnnqTmooXwLcE99LS1dV1eShfv7aeCm3:FEjKyDjGnnyoXwLVJS3V1eSJ7SO

Entry address:
0x1C8A1C

Entry point:
E8, D1, FB, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 75, 10, 6A, 00, FF, 75, 0C, FF, 75, 08, E8, 05, 00, 00, 00, 83, C4, 10, 5D, C3, 55, 8B, EC, 83, EC, 20, 53, 57, 33, DB, 8D, 7D, E4, 6A, 07, 33, C0, 89, 5D, E0, 59, F3, AB, 39, 45, 0C, 75, 15, E8, 33, 1C, 00, 00, C7, 00, 16, 00, 00, 00, E8, 22, B1, 00, 00, 83, C8, FF, EB, 6D, 8B, 45, 08, 85, C0, 74, E4, 56, FF, 75, 14, 89, 45, E8, FF, 75, 10, 89, 45, E0, 8D, 45, E0, FF, 75, 0C, C7, 45, EC, 42, 00, 00, 00, 50, C7, 45, E4, FF, FF, FF, 7F, E8, 9B, FC, 00...
 
[+]

Entropy:
7.3871

Code size:
2.7 MB (2,786,304 bytes)

The file webcompanioninstalleroc141001-0506.exe has been discovered within the following program.

Open Downloader Manager  by Installer Technology Co
ODM is a download manager that plugs into various web browsers (IE, Chrome and Firefox). The installer is designed to bundle and offer various additional offers including toolbars and other potentially harmful programs.
opendownloadmanager.com
73% remove it
 
Powered by Should I Remove It?

The file webcompanioninstalleroc141001-0506.exe has been seen being distributed by the following URL.

http://downloads11.lavasoft.com/.../download.ashx?productcode=wc$params=http://webcompanion.com/update?source=inappupdate&mvt-inter=partner&campaign=campaign&homepage=1&search=1&restore-homepage=0&restore-search=0$dwld=http://downloads11.lavasoft.com/.../download.asp

Scan webcompanioninstalleroc141001-0506.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.