» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

InstallShield

YOUNGLIMWON SOFT LAB Co., Ltd.

The program is a setup application that uses the InstallShield Setup installer. This is the uninstaller utility registered in the Windows Control Panel for the program KSystem ver.5 Genuine(KSystem ver.5 Genuine) by Young Lim Won.

File name:

setup.exe

Publisher:

Acresso Software Inc. (signed by YOUNGLIMWON SOFT LAB Co., Ltd.)

Product:

InstallShield

Description:

InstallScript Setup Launcher

Version:

16.0.400

MD5:

587c70b3e069f645b3a90ae4eb68a45d

SHA-1:

13390f55d8dad4716e7f3272ba49c2af63a7299d

SHA-256:

45f92ae3e5a2419886505f0a39e01550dd22e12485d71da7af69b923654ffb79

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:06:59 AM UTC (today)

File size:

791.7 KB (810,672 bytes)

Product version:

16.0

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Installer:

InstallShield Setup

Common path:

C:\Program Files\installshield installation information\{4526c9a4-2787-493a-9bbc-48e42e297c24}\setup.exe

Digital Signature

Signed by:

YOUNGLIMWON SOFT LAB Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

1/11/2011 9:00:00 AM

Valid to:

2/10/2014 8:59:59 AM

Subject:

CN="YOUNGLIMWON SOFT LAB Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="YOUNGLIMWON SOFT LAB Co., Ltd.", L=Gangseo-gu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

312C084A8C94E7B74102D6829B0DE3FC

File PE Metadata

Compilation timestamp:

9/22/2009 12:59:51 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:FU9j8D8F3GLLE2tyjn+n7iH1i/5WhYz/KmsYuNpkKHX2aAzlNjYPDdOHBCGvVpR8:FKj84VGLHik/Lz/BXuALlNcLdUF3qWo5

Entry address:

0x3D484

Entry point:

55, 8B, EC, 6A, FF, 68, 50, 85, 46, 00, 68, A8, F0, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 24, 73, 46, 00, 33, D2, 8A, D4, 89, 15, 88, DB, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 84, DB, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 80, DB, 47, 00, C1, E8, 10, A3, 7C, DB, 47, 00, 6A, 01, E8, 43, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 28, 15, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75... 
[+]

Entropy:

6.6568

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

406.5 KB (416,256 bytes)

Program Uninstaller

Program name:

KSystem ver.5 Genuine(KSystem ver.5 Genuine)

Display publisher:

Young Lim Won

Display version:

1.00.000

Uninstall string:

"C:\Program Files (x86)\InstallShield Installation Information\{4526C9A4-2787-493A-9BBC-48E42E297C24}\setup.exe" -runfromtemp -l0x0409 -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.