home

appmanagersetup_1.47.exe

Well Known Media Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Well Known Media Ltd  (signed and verified)

MD5:
74c81b0c4e85f7ca683109438ba6c22b

SHA-1:
b2b873b69114ba98d7af6c169f143a81c816b0fe

SHA-256:
2b86318210ffcec5ccf416f2c79159b11b489b5dbfceb28878e233ee61fb068e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/24/2024 3:04:00 PM UTC  (today)

File size:
829.4 KB (849,352 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\appmanagersetup_1.47.exe

Digital Signature
Signed by:
Well Known Media Ltd

Authority:
Thawte, Inc.

Valid from:
11/27/2014 6:00:00 PM

Valid to:
11/27/2016 5:59:59 PM

Subject:
CN=Well Known Media Ltd, OU=FileHippo, O=Well Known Media Ltd, L=London, S=England, C=GB

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
65857DF98CF56A13805D20AF7078FA00

File PE Metadata
Compilation timestamp:
2/24/2012 1:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:EECgTVDwLT7UuHOa3n/tqr5WHGd8qHWzRhZqL02V7Y7CXaCcTnTVOF/8B:E7gTqVHn/gF0wkI0MxX+hi8B

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9407

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file appmanagersetup_1.47.exe has been discovered within the following program.

FileHippo App Manager  by FileHippo.com
Publisher's description - “The FileHippo App Manager will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases. These are then neatly displayed in your browser for you to download.”
filehippo.com/download_update_checker/58783
50% remove it
 
Powered by Should I Remove It?

The file appmanagersetup_1.47.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/es/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://fs40.filehippo.com/1482/.../AppManagerSetup_1.47.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/fr/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/fr/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://data.over-blog-kiwi.com/0/63/70/76/.../ob_ad1d9c_appmanagersetup-1-47-1.exe

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://fs35.filehippo.com/4526/.../AppManagerSetup_1.47.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/it/download/file/.../

Latest 30 of 177 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.