home

oovoosetup.exe

Secure Installer

The application oovoosetup.exe by Secure Installer has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from downloader.downloadinfo.co a known adware distribution point operated by Downloadinfo.
Publisher:
Secure Installer  (signed and verified)

MD5:
b5e15eb5256c0348deb6c79c60e2596a

SHA-1:
df5364c66a697f5db0aa183a4b91445a75dff0c2

SHA-256:
c6125fbb133173f274f28433bcc9b81cd670bf0972939cc1f53c4c44c83fc858

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 2:15:20 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.SecureIn.Installer (M)
16.7.10.12

File size:
1.1 MB (1,197,704 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\oovoosetup.exe

Digital Signature
Signed by:
Secure Installer

Authority:
COMODO CA Limited

Valid from:
9/24/2012 8:00:00 PM

Valid to:
9/25/2013 7:59:59 PM

Subject:
CN=Secure Installer, O=Secure Installer, STREET=720 Market Street, STREET=5th floor, L=San Francisco, S=CA, PostalCode=94102, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C3507C1ADDE6B4C52E5426990F85CA2B

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:quSjI5Tt+qmiymsymgmtpfEoUl+4Q8pKSWb3jWuvMpPOGzhei:qu1J+3iymsymgm3soC+x8hiTWRZHs

Entry address:
0xD59D0

Entry point:
55, 8B, EC, 83, C4, F0, B8, 94, 87, 41, 00, E8, C8, DF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7068

Developed / compiled with:
Microsoft Visual C++

Code size:
866 KB (886,784 bytes)

The file oovoosetup.exe has been seen being distributed by the following URL.

http://downloader.downloadinfo.co/?id=bef2bf4f9e46b025b6ef7354e05eced38fe19683&ts=1356140948&r=/review/.../?kw=free download&subid=DIOVUS&cust=oovoo free download&type=oovoo&sl=1&gclid=CLb_l-nyrLQCFcaiPAodGT8Aow&utm_campaign=DIOVUS&fwd=1

Remove oovoosetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.