setup.exe

OpenDrive Drive for Windows

OpenDrive, Inc.

Publisher:
OpenDrive Inc.  (signed by OpenDrive, Inc.)

Product:
OpenDrive Drive for Windows

Description:
OpenDrive Drive Setup Bootstrapper

Version:
1,5,1,0

MD5:
b315dc8e5b2904c57ee08c7e399ea0ca

SHA-1:
a688bd380c5e374da1a41e7599744753807b5692

SHA-256:
48fd686a997d1a37b878f4493edf7fbd4f8be23ca3ae538319ec315715033e0b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 1:35:27 AM UTC  (today)

File size:
489 KB (500,744 bytes)

Product version:
1,5,1,0

Copyright:
Copyright (c)OpenDrive Inc. 2012

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
8/14/2012 8:00:00 PM

Valid to:
8/15/2013 7:59:59 PM

Subject:
CN="OpenDrive, Inc.", OU=IT, O="OpenDrive, Inc.", STREET="228 Hamilton Avenue, 3rd Floor", L=Palo Alto, S=CA, PostalCode=94301, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00BDE44F5BF4AB843A5AA8718FE970A983

File PE Metadata
Compilation timestamp:
2/15/2013 6:25:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:TUG1KSHH2GXnrbrHmOLOgtHUvI0B1C6Df1y/UHitKIiAyBRsc:TXHH2mrbrHmO5II0nb1ysCtfjKRsc

Entry address:
0x24D74

Entry point:
E8, 64, 86, 00, 00, E9, 79, FE, FF, FF, 6A, 0C, 68, B8, 91, 45, 00, E8, A2, 02, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, 9C, 4B, 46, 00, 03, 75, 43, 6A, 04, E8, 4E, 88, 00, 00, 59, 83, 65, FC, 00, 56, E8, 76, 88, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, 97, 88, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 83, 7D, E4, 00, 75, 37, FF, 75, 08, EB, 0A, 6A, 04, E8, 3A, 87, 00, 00, 59, C3, 56, 6A, 00, FF, 35, 04, 37, 46, 00, FF, 15, 28, 00, 45, 00, 85, C0, 75, 16, E8, 92, 38, 00...
 
[+]

Entropy:
6.6762

Code size:
315 KB (322,560 bytes)

The file setup.exe has been seen being distributed by the following 4 URLs.

Scan setup.exe - Powered by Reason Core Security