home

chromodo_setup.exe

Chromodo

Comodo Security Solutions, Inc

This is a setup and installation application. The file has been seen being downloaded from cd-rom-archive.s3.amazonaws.com and multiple other hosts.
Publisher:
Comodo  (signed by Comodo Security Solutions, Inc)

Product:
Chromodo

Version:
48.12.18.238

MD5:
4cc5a3b62766d15a42213a3a0c17f3f7

SHA-1:
ce2392f47145f8fbd916049c4b09568c5133c782

SHA-256:
f84cef17eca6532ac6bf25f316cf81f106d470dab3f35c41ae4a6f26a99fd8be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:26:17 AM UTC  (today)

File size:
50.6 MB (53,040,800 bytes)

Product version:
48.12.18.238

Copyright:
Copyright (c) 2009-2016, Comodo Security Solutions, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\temp\chromodo_setup.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc

Authority:
COMODO CA Limited

Valid from:
1/12/2016 2:00:00 AM

Valid to:
1/12/2018 1:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc", O="Comodo Security Solutions, Inc", STREET=1255 Broad St, STREET=Suite 100, L=Clifton, S=NJ, PostalCode=07013, C=US, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, SERIALNUMBER=3910805

Issuer:
CN=COMODO RSA Extended Validation Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00909BD8C9E6E31DA161991DD98A992433

File PE Metadata
Compilation timestamp:
12/27/2015 8:25:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1572864:KLwOpa2Duz0MbnqGp8Pmp17jOpypy+HdTT+u:KLXJSn38PmP7CpIy+9TTl

Entry address:
0x326A

Entry point:
81, EC, D4, 02, 00, 00, 55, 56, 6A, 20, 33, ED, 5E, 89, 6C, 24, 0C, 68, 01, 80, 00, 00, C7, 44, 24, 0C, 00, 93, 40, 00, 89, 6C, 24, 18, FF, 15, B0, 70, 40, 00, FF, 15, AC, 70, 40, 00, 66, 3D, 06, 00, 74, 11, 55, E8, 51, 31, 00, 00, 3B, C5, 74, 07, 68, 00, 0C, 00, 00, FF, D0, 53, 57, 68, F4, 92, 40, 00, E8, CE, 30, 00, 00, 68, EC, 92, 40, 00, E8, C4, 30, 00, 00, 68, E0, 92, 40, 00, E8, BA, 30, 00, 00, 6A, 09, E8, 1F, 31, 00, 00, 6A, 07, E8, 18, 31, 00, 00, A3, 24, 92, 42, 00, FF, 15, 44, 70, 40, 00, 55, FF...
 
[+]

Code size:
24 KB (24,576 bytes)

The file chromodo_setup.exe has been seen being distributed by the following 2 URLs.

http://cd-rom-archive.s3.amazonaws.com/content/.../chromodosetup (1).exe

http://files.downloadnow.com/s/software/14/50/30/.../chromodosetup.exe

Scan chromodo_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.