» irsetup.exe
Overview
Analysis
File Details
Programs (2)

irsetup.exe

Setup Factory 8.0 Runtime

Martijn de Visser Software

The program is a setup application that uses the Setup Factory installer. This is installed with multiple programs including FLV Player.

File name:

irsetup.exe

Publisher:

Indigo Rose Corporation (signed by Martijn de Visser Software)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

bb8a422926277f01055d186c12df154d

SHA-1:

06ef28437628a68edbd3e2183e86feb38bfd4fb1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 4:00:28 AM UTC (today)

File size:

570.7 KB (584,416 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\irsetup.exe

Digital Signature

Signed by:

Martijn de Visser Software

Authority:

VeriSign, Inc.

Valid from:

10/20/2010 5:00:00 PM

Valid to:

10/24/2011 4:59:59 PM

Subject:

CN=Martijn de Visser Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Martijn de Visser Software, L=Amersfoort, S=Utrecht, C=NL

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3AD5B9F7B681163FBDA336F9439FD591

File PE Metadata

Compilation timestamp:

6/22/2010 6:15:05 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:Va4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFL:V3/TOMs8RVFXqL

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8865

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

The file irsetup.exe has been discovered within the following programs.

Applian FLV Player by Applian Technologies Inc.

Publisher's description - “Looking for an easy way to play FLV (Flash Video) files downloaded from YouTube and other video sites? Get the free Applian FLV Player. It's easy to use, and you can view videos at 1x, 2x or even full screen.”

applian.com/flvplayer

23% remove it

FLV Player by Martijn de Visser

mdvisser.nl/flvplayer

About 6% of users remove it

Scan irsetup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.