home

vso_downloader_setup.exe

VSO Downloader 4

VSO Software

This is a setup and installation application. The file has been seen being downloaded from es.vso-software.fr.
Publisher:
VSO Software

Product:
VSO Downloader 4

Version:
4.5.0.17

MD5:
03246542a3c9230dbd24f1f51b04505a

SHA-1:
5a0f4e543f3060dd56a9e83c11d6ba1807037ce4

SHA-256:
77bdf22e86b83769ad8325b85b8244942bf9072897ee58bf9ab408b9d9bc881b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/14/2025 2:08:59 PM UTC  (today)

File size:
16.8 MB (17,608,568 bytes)

Product version:
4.5.0.17

Copyright:
VSO Software 2002-2015

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\vso_downloader_setup.exe

File PE Metadata
Compilation timestamp:
10/13/2013 11:19:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:ZazPEiNDXmLShdJeOCuyILBzqF4UHWKp8K4VDvrNGEL921:Qz88m+MOCuyuBS4KKK4VTNG+921

Entry address:
0x113BC

Entry point:
8A, D0, FE, CD, 72, 03, 0F, B6, C2, 42, 86, D9, BB, 91, D5, A9, C4, 0F, BF, F6, 41, 8A, F5, 09, FA, 3D, 3F, CE, 00, 00, 8B, D8, 87, D9, 8D, 1D, F7, 69, F1, 66, FF, CD, 4F, 84, F4, E8, 45, 00, 00, 00, C6, C0, A6, 87, CB, 81, E6, 26, 5B, C6, E5, 75, 03, 4F, FF, C0, F6, C6, CA, C7, C6, EF, 21, 2A, F9, 8B, EA, F6, C1, D6, 69, C5, 64, 20, 68, CD, 8D, 5D, 00, F6, C3, 26, 8B, F5, 8D, 05, AA, 32, 6A, 46, 33, D2, 88, E8, 48, 85, C6, 03, D3, 84, F0, 0D, 79, FF, CF, F8, 0F, B6, EA, 2B, C0, 8A, FE, 21, F6, 81, F9, 66...
 
[+]

Entropy:
7.9993  (probably packed)

Code size:
63.5 KB (65,024 bytes)

The file vso_downloader_setup.exe has been seen being distributed by the following URL.

http://es.vso-software.fr/download_product_direct.php?product=downloader

Scan vso_downloader_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.