home

setup.exe

InstallShield

Corel Corporation

The program is a setup application that uses the InstallShield Setup installer. This is installed with Corel PDF Fusion. The file has been seen being downloaded from s2.download.net.pl and multiple other hosts.
Publisher:
Acresso Software Inc.   (signed by Corel Corporation)

Product:
InstallShield

Description:
InstallScript Setup Launcher

Version:
16.0.400

MD5:
82aaf6da40cbb03ab941c5e8ffa61e0e

SHA-1:
82132839c42ad7fdd44bcfe7eee7b60da8c146c8

SHA-256:
f40dc14f808d4265d5442812519960a209ff45c5ca1e5ea650e9785ea199863b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:40:30 PM UTC  (today)

File size:
279.5 MB (293,031,584 bytes)

Product version:
16.0

Copyright:
Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/18/2010 12:00:00 AM

Valid to:
6/29/2013 11:59:59 PM

Subject:
CN=Corel Corporation, OU=Common Engineering Services, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4D44BE05E1625BEF48B87F1477A76FF7

File PE Metadata
Compilation timestamp:
9/22/2009 3:59:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:BsW0S8ocSqxiOqUS5tglT2eRv0Y9S65FA:BsW3xqxWrsTdZSd

Entry address:
0x3D484

Entry point:
55, 8B, EC, 6A, FF, 68, 50, 85, 46, 00, 68, A8, F0, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 24, 73, 46, 00, 33, D2, 8A, D4, 89, 15, 88, DB, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 84, DB, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 80, DB, 47, 00, C1, E8, 10, A3, 7C, DB, 47, 00, 6A, 01, E8, 43, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 28, 15, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
406.5 KB (416,256 bytes)

The file setup.exe has been discovered within the following program.

Corel PDF Fusion  by Corel Corporation
Publisher's description - “Boost your productivity with Corel® PDF Fusion™, an all-in-one PDF creator that lets you view files, plus assemble, edit and create PDFs. View more than 100 different file types just by dragging and dropping them into the Welcome Screen.”
www.corel.com
6% remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 3 URLs.

http://s2.download.net.pl/Corel-PDF-Fusion-24774--1761753.exe

http://mirror1.hermanstreet.com/d/.../CorelPDFFusion.exe

http://www.corel.com/akdlm/6763/downloads/trials/CorelPDFFusion/1/.../CorelPDFFusion.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.