home

setup.exe

Rosetta Stone Language Training

Rosetta Stone Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with Rosetta Stone Language Training. The file has been seen being downloaded from downloads.rosettastone.com and multiple other hosts.
Publisher:
Rosetta Stone, Ltd.  (signed by Rosetta Stone Ltd)

Product:
Rosetta Stone Language Training

Description:
Rosetta Stone Language Training Installer

Version:
5.0.37.0

MD5:
3269f3e999d25936c4a46777bf670ef8

SHA-1:
a1399892d597c942646c3e934c0ca9b9e1c87947

SHA-256:
3bacba87c813416a655fb0b7dd79d86fc7452dfc84fbdf78243599c756a54097

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 12:48:14 PM UTC  (today)

File size:
96.4 MB (101,101,256 bytes)

Copyright:
Copyright 2014 Rosetta Stone, Ltd.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Rosetta Stone Ltd

Authority:
Symantec Corporation

Valid from:
6/30/2015 2:00:00 AM

Valid to:
6/30/2018 1:59:59 AM

Subject:
CN=Rosetta Stone Ltd, O=Rosetta Stone Ltd, L=Harrisonburg, S=Virginia, C=US, SERIALNUMBER=03925369, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Virginia, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
51865393C80738EA9C94916F576E8DFE

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:MzShoaSK3rtxKhqE857AmTcuPPlmidt+fFIyv3FGDekKKG7BFw9ltRKb:MIhSVhqEbwcUPzt+f1ye/ndaljKb

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

The file setup.exe has been discovered within the following program.

Rosetta Stone Language Training  by Rosetta Stone Ltd.
About 1% of users remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 7 URLs.

http://downloads.rosettastone.com/.../Setup.exe

http://tzwebchartchrome.tradezone.com.br/Setup.exe

http://downloads.rosettastone.com/.../Setup.exe

http://113.171.224.214/.../update.exe

http://113.171.224.245/.../update.exe

http://downloads.rosettastone.com/.../Setup.exe

http://resources.rosettastone.com/rs/updates/application/5.0.37.0/.../update.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.