» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

DIRECTV nomad

Morega Systems Inc.

This is the uninstaller utility registered in the Windows Control Panel for the program DIRECTV nomad by DIRECTV, LLC.

File name:

setup.exe

Publisher:

DIRECTV, LLC (signed by Morega Systems Inc.)

Product:

DIRECTV nomad

Description:

Setup Launcher Unicode

Version:

1.4.55.3

MD5:

f2c03cf5db6ac15a306fa9767e5ae99f

SHA-1:

ef5bc9165758f6b1fbddcd196fdcf07fea43c509

SHA-256:

80814f8266ad777228fbc823824940be06d8ef58424e219b443b358e0b64a457

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 12:59:19 PM UTC (today)

File size:

1.1 MB (1,182,536 bytes)

Product version:

1.4.55.3

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\installshield installation information\{4ec4e1fe-cb8b-4cc4-bb49-6f5696959224}\setup.exe

Digital Signature

Signed by:

Morega Systems Inc.

Authority:

VeriSign, Inc.

Valid from:

1/24/2012 7:00:00 PM

Valid to:

2/13/2014 6:59:59 PM

Subject:

CN=Morega Systems Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Morega Systems Inc., L=Mississauga, S=Ontario, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3101B191C7EF58D27285DAC76DE12BDB

File PE Metadata

Compilation timestamp:

10/5/2010 4:39:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:0xNlFSIthzcjw4hfvyERsHo0VxvkTbFVQWUA:07KIzyhh5Oo0wTbFVZh

Entry address:

0x68208

Entry point:

E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0... 
[+]

Entropy:

6.6609

Code size:

684 KB (700,416 bytes)

Program Uninstaller

Program name:

DIRECTV nomad

Display publisher:

DIRECTV, LLC

Display version:

1.4.55.3

Uninstall string:

"C:\users\{user}\appdata\roaming\installshield installation information\{4ec4e1fe-cb8b-4cc4-bb49-6f5696959224}\setup.exe" -runfromtemp -l0x0409 -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.