home

Setup.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. This is the uninstaller utility registered in the Windows Control Panel for the program Creative Sound Blaster Properties x64 Edition by Creative Technology Limited.
Publisher:
InstallShield Software Corporation  (signed and verified)

Product:
InstallShield (R)

Description:
Setup.exe

Version:
9.01.429

MD5:
cafb55aa463c6df8802122838d50d2bb

SHA-1:
90054dfba153d69c426723121f2746d2aa18f912

SHA-256:
c500187ab0bafe03622c8fc4754915ed4cd36f643e691baf21c172c233660cc8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:06:18 PM UTC  (today)

File size:
114.1 KB (116,880 bytes)

Product version:
9.01

Copyright:
Copyright (C) 2003 InstallShield Software Corp.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\{5c6f884d-680c-448b-b4c9-22296ee1b206}\setup.exe

Digital Signature
Signed by:
InstallShield Software Corporation

Authority:
Thawte Consulting cc

Valid from:
8/6/2003 2:02:07 PM

Valid to:
8/5/2004 2:02:07 PM

Subject:
CN=InstallShield Software Corporation, OU=Research and Development, O=InstallShield Software Corporation, L=Schaumburg, S=Illinois, C=US

Issuer:
E=server-certs@thawte.com, CN=Thawte Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, S=Western Cape, C=ZA

Serial number:
1ED82F

File PE Metadata
Compilation timestamp:
11/10/2003 3:16:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:QAsBJ4EIukM38TrcAXJGnuMcwyBtJLt5Aa:zi4EIQ8ETucyVAa

Entry address:
0xCC61

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 50, 21, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 4C, 21, 41, 00, 8A, 06, 57, 8B, 3D, 44, 22, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 48, 21, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Entropy:
6.2755

Packer / compiler:
InstallShield Custom

Code size:
65.5 KB (67,072 bytes)

5 Program Uninstaller
Program name:
Creative Sound Blaster Properties x64 Edition

Display publisher:
Creative Technology Limited

Display version:
1.03

Uninstall string:
"C:\Program Files (x86)\Creative Installation Information\SBCONTROL64\Setup.exe" /remove /l0x0009

Program name:
ZENcast Organizer

Uninstall string:
"C:\Program Files\Creative Installation Information\ZENCAST_ORGANIZER\Setup.exe" /remove /l0x0009

Program name:
Acer Camera Driver

Uninstall string:
"C:\Program Files\Common Files\Acer\OrbiCam\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT

Program name:
Camera Driver

Uninstall string:
"C:\Program Files\Common Files\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT

Program name:
ZEN Vision:M Series Media Explorer

Uninstall string:
"C:\Program Files\Creative Installation Information\ZEN_VISION_M_SERIES_MEDIA_EXPLORER\Setup.exe" /remove /l0x0009


2 Startup Files (All Users Run Once)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:
InstallShieldSetup

Command:
C:\Program Files2\instal~1\{1ef64~1\setup.exe -rebootC:\Program Files2\instal~1\{1ef64~1\reboot.ini -l0x9

Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:
InstallShieldSetup1

Command:
C:\Program Files2\instal~1\{88c97~1\setup.exe -rebootC:\Program Files2\instal~1\{88c97~1\reboot.ini -l0x9


The file Setup.exe has been discovered within the following programs.

CallAtlanta  by Primerica Financial Services
Publisher's description - “Call Atlanta is used by Primerica Representatives to retrieve information to help their businesses grow, be informed about Primerica promotions, and download useful information and documents for their businesses.”
www.primericaonline.com
About 4% of users remove it
Logitech Updater  by Logitech Inc.
Logitech Updater is the software update program that runs with Windows in the background and checks for updates, and automatically downloads and installs them if found based on the user's settings.
www.logitech.com
11% remove it
Logitech® Camera Driver  by Logitech Inc.
This is the software driver package for the installed Logitech Webcam. The driver package is required in order for the Logitech Webcam to function properly and is the software that allows your computer to communicate with this hardware device.
1% remove it
Macintosh Drivers for Windows XP  by Apple Inc.
www.apple.com
7% remove it
Painkiller Hell & Damnation  by The Farm 51
www.painkillergame.com
About 3% of users remove it
Remove DNA-Force  by DNA-Drivers
About 1% of users remove it
THX TruStudio Pro  by Creative Technology Ltd
Publisher's description - “THX® TruStudio Pro™ is specially designed to bring the same great audio experience found in live performances, films, and recording studios - to the PC.”
www.creative.com
12% remove it
VOLKSWOHL BUND - Angebotsprogramm Komfort  by VOLKSWOHL BUND Versicherungen
www.volkswohl-bund.de
About 3% of users remove it
 
Powered by Should I Remove It?

The file Setup.exe has been seen being distributed by the following 2 URLs.

temp:setup.exe

https://patch.oppatch.com/Windows/.../setup.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.