» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

DIRECTV nomad

Morega Systems Inc.

This is the uninstaller utility registered in the Windows Control Panel for the program DIRECTV nomad by DIRECTV.

File name:

setup.exe

Publisher:

DIRECTV (signed by Morega Systems Inc.)

Product:

DIRECTV nomad

Description:

Setup Launcher Unicode

Version:

1.2.60.1

MD5:

a34d1f3a90197886be621069491dff84

SHA-1:

33aeec1679ea23bb4fc10791c265d72f8777c517

SHA-256:

12a9ddd51708678ff6ecdb10104ef0b790f4423f7ceaff7109b1a8bfcd3430c4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 6:06:55 AM UTC (today)

File size:

1.1 MB (1,182,056 bytes)

Product version:

1.2.60.1

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\installshield installation information\{ba7e4d7b-24e6-46d0-809e-e77e92fc757f}\setup.exe

Digital Signature

Signed by:

Morega Systems Inc.

Authority:

VeriSign, Inc.

Valid from:

1/24/2012 7:00:00 PM

Valid to:

2/13/2014 6:59:59 PM

Subject:

CN=Morega Systems Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Morega Systems Inc., L=Mississauga, S=Ontario, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3101B191C7EF58D27285DAC76DE12BDB

File PE Metadata

Compilation timestamp:

10/5/2010 4:39:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:NxNlFSIthzcjw4hfvyERsHo0VxvkTbF1QWQg:N7KIzyhh5Oo0wTbF1ZZ

Entry address:

0x68208

Entry point:

E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0... 
[+]

Entropy:

6.6602

Code size:

684 KB (700,416 bytes)

Program Uninstaller

Program name:

DIRECTV nomad

Display publisher:

DIRECTV

Display version:

1.2.60.1

Uninstall string:

"C:\users\{user}\appdata\roaming\installshield installation information\{ba7e4d7b-24e6-46d0-809e-e77e92fc757f}\setup.exe" -runfromtemp -l0x0409 -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.