» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

Thrustmaster FFB Driver

Guillemot Recherche et Développement, Inc

This is the uninstaller utility registered in the Windows Control Panel for the program Thrustmaster Force Feedback Driver by Thrustmaster.

File name:

setup.exe

Publisher:

Thrustmaster (signed by Guillemot Recherche et Développement, Inc)

Product:

Thrustmaster FFB Driver

Description:

InstallScript Setup Launcher Unicode

Version:

4.FFD.2016

MD5:

012737b786d97ad479ac17ed918d88a7

SHA-1:

bb08561a8c7dbce8e61c425c50d2e7e8630f51d0

SHA-256:

692628b8861caa5bb1604e81ac104d729338a3c5076d91ccb29c3fb39da2793f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/6/2024 12:26:29 AM UTC (today)

File size:

1.1 MB (1,199,736 bytes)

Product version:

4.FFD.2016

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\installshield installation information\{8f5a0981-5cdc-41d0-bca2-ad3b777fc358}\setup.exe

Digital Signature

Signed by:

Guillemot Recherche et Développement, Inc

Authority:

DigiCert Inc

Valid from:

7/27/2015 5:00:00 PM

Valid to:

7/31/2018 5:00:00 AM

Subject:

CN="Guillemot Recherche et Développement, Inc", O="Guillemot Recherche et Développement, Inc", L=Montreal, S=Quebec, C=CA, PostalCode=H2R 2Z5, STREET=7250 Marconi street, SERIALNUMBER=1147913124, OID.1.3.6.1.4.1.311.60.2.1.2=Quebec, OID.1.3.6.1.4.1.311.60.2.1.3=CA, OID.2.5.4.15=Private Organization

Issuer:

CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

042638C668271485674434C98566F049

File PE Metadata

Compilation timestamp:

9/14/2015 9:06:48 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:YQt5lb3YpnAuE9CDRYcDZYr1yy0llllj6XAF7rCWvF:vt5JunAuE9CD+yaOlllljC4bd

Entry address:

0x5E1AF

Entry point:

E8, 1A, D9, 00, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 3C, 83, 7D, 08, 00, 75, 13, E8, C7, EE, FF, FF, 6A, 16, 5E, 89, 30, E8, 8D, 6A, 00, 00, 8B, C6, EB, 25, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 09, E8, A9, EE, FF, FF, 6A, 22, EB, E0, 50, FF, 75, 10, FF, 75, 08, E8, 93, CB, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45, 0C, 72, F2, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC... 
[+]

Entropy:

6.6924

Code size:

687 KB (703,488 bytes)

Program Uninstaller

Program name:

Thrustmaster Force Feedback Driver

Display publisher:

Thrustmaster

Display version:

4.FFD.2016

Uninstall string:

"C:\Program Files (x86)\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe" -runfromtemp -l0x0409 -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.