» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

RICS Enterprise POS

CSI Services Corp.

This is the uninstaller utility registered in the Windows Control Panel for the program RICS Enterprise POS by RICS Software.

File name:

setup.exe

Publisher:

RICS Software (signed by CSI Services Corp.)

Product:

RICS Enterprise POS

Description:

Setup Launcher Unicode

Version:

2.7.673

MD5:

339289a8b824edcd78fe3e6a1f34ead8

SHA-1:

21fc9113a9df82689df954901db29206a1e88658

SHA-256:

25f424785b42da6290565a8936ad6fbc780b2c25f271bb249af8d97e21f8c3cd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 11:58:53 PM UTC (a few moments ago)

File size:

1.1 MB (1,182,088 bytes)

Product version:

2.7.673

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\installshield installation information\{4bc784f6-4b5a-429a-8879-90621c35997c}\setup.exe

Digital Signature

Signed by:

CSI Services Corp.

Authority:

VeriSign, Inc.

Valid from:

10/5/2011 6:00:00 PM

Valid to:

10/21/2014 5:59:59 PM

Subject:

CN=CSI Services Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CSI Services Corp., L=Indianapolis, S=Indiana, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

468B66C36939CBB75F1D8E3F23CA6574

File PE Metadata

Compilation timestamp:

10/5/2010 2:39:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:DxNlFSIthzcjw4hfvyERsHo0VxvkTbFBQWKaz:D7KIzyhh5Oo0wTbFBZT

Entry address:

0x68208

Entry point:

E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0... 
[+]

Entropy:

6.6602

Code size:

684 KB (700,416 bytes)

Program Uninstaller

Program name:

RICS Enterprise POS

Display publisher:

RICS Software

Display version:

2.7.673

Uninstall string:

"C:\Program Files (x86)\InstallShield Installation Information\{4BC784F6-4B5A-429A-8879-90621C35997C}\setup.exe" -runfromtemp -l0x0409 -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.