home

Setup.exe

InstallShield

Heat Transfer Research, Inc.

The program is a setup application that uses the InstallShield Setup installer. This is the uninstaller utility registered in the Windows Control Panel for the program HTRI Xchanger Suite (R) 6.0 by Heat Transfer Research, Inc..
Publisher:
Acresso Software Inc.  (signed by Heat Transfer Research, Inc.)

Product:
InstallShield

Description:
Setup.exe

Version:
15.0.498

MD5:
904a30f483bd6e80f69bac5a8f01c010

SHA-1:
752a37d266aabebc06fab27ffb54d7be9854c2b1

SHA-256:
82b0a8d412635ce3b6ba351188dd4eefa7e2a469e4c4b883f74d4415284ae1fc

Scanner detections:
10 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/24/2024 10:17:27 AM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win32/ChiHack.6652
2014.07.05

Baidu Antivirus
Virus.Win32.Runouce.$a
4.0.3.15727

Fortinet FortiGate
W32/Chir.B@mm
7/27/2015

G Data
Win32.Runouce.B@mm
15.7.24

IKARUS anti.virus
Email-Worm.Win32.Runouce
t3scan.1.6.1.0

Panda Antivirus
W32/Chir.B
15.07.27.03

Qihoo 360 Security
Virus.Win32.CNHacker.C
1.0.0.1015

Rising Antivirus
PE:Worm.ChineseHacker-2!23772
23.00.65.15725

Vba32 AntiVirus
Virus.Win32.Chur.A
3.12.26.3

ViRobot
Win32.Chir.B
2011.4.7.4223

File size:
389.3 KB (398,688 bytes)

Product version:
15.0

Copyright:
Copyright (C) 2008 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\Program Files\installshield installation information\{974c0b93-54a1-4c7a-895f-5481dfad2c59}\setup.exe

Digital Signature
Signed by:
Heat Transfer Research, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/24/2008 5:30:00 AM

Valid to:
9/25/2011 5:29:59 AM

Subject:
CN="Heat Transfer Research, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Heat Transfer Research, Inc.", L=College Station, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
76A2A3F19EAAA989305F3FFD0166A8

File PE Metadata
Compilation timestamp:
5/10/2008 9:09:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:XGWK9s2n1sDEo7SUknwoD6AaeICSj7kEoeB0PFn0wcccccccca:X9ysTOnKt7owf

Entry address:
0x21EE4

Entry point:
55, 8B, EC, 6A, FF, 68, F0, A2, 44, 00, 68, 60, 49, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, FC, 92, 44, 00, 33, D2, 8A, D4, 89, 15, D0, 8B, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, 8B, 45, 00, C1, E1, 08, 03, CA, 89, 0D, C8, 8B, 45, 00, C1, E8, 10, A3, C4, 8B, 45, 00, 6A, 01, E8, A4, 17, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 98, 14, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.3666

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
288 KB (294,912 bytes)

Program Uninstaller
Program name:
HTRI Xchanger Suite (R) 6.0

Display publisher:
Heat Transfer Research, Inc.

Display version:
6.0

Uninstall string:
"C:\Program Files (x86)\InstallShield Installation Information\{974C0B93-54A1-4C7A-895F-5481DFAD2C59}\setup.exe" -runfromtemp -l0x0009 -removeonly


Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.