home

setup.exe

InstallShield

Celemony Software GmbH

This is the uninstaller utility registered in the Windows Control Panel for the program Melodyne singletrack by Celemony Software GmbH. The file has been seen being downloaded from go.pcsoftupdate.com.
Publisher:
Acresso Software Inc.   (signed by Celemony Software GmbH)

Product:
InstallShield

Description:
InstallScript Setup Launcher

Version:
16.0.435

MD5:
b1bff4a2da88e3fb7b0de5784db439b2

SHA-1:
89a9c1256b18e2b175a80e876c8c6c847513b5b6

SHA-256:
b4be91db3b2920ec329e0b2285da123373241d6d3827b3e2ad12fbbb85f67a89

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 4:20:41 AM UTC  (today)

File size:
793.2 KB (812,216 bytes)

Product version:
16.0

Copyright:
Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\installshield installation information\{16df894d-fc3f-4b87-908d-671e201cd7a8}\setup.exe

Digital Signature
Signed by:
Celemony Software GmbH

Authority:
StartCom Ltd.

Valid from:
5/23/2013 4:02:40 AM

Valid to:
5/22/2016 2:08:28 PM

Subject:
E=ar@celemony.com, CN=Celemony Software GmbH, O=Celemony Software GmbH, L=München, S=Bayern, C=DE, Description=6bEb9mJSGuEXVR2g

Issuer:
CN=StartCom Class 3 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
09E3

File PE Metadata
Compilation timestamp:
1/21/2010 5:31:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:tXhf4Ax+Xcz26/8VDtJMl4ZJGjYjVkTz2IHAQo2iqMnmChsroaNneWGTVYPDdqCL:tZXQD6YG8jNIHAQoP1H85LdDF3qWC0

Entry address:
0x3D64F

Entry point:
55, 8B, EC, 6A, FF, 68, 50, 85, 46, 00, 68, 48, F2, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 28, 73, 46, 00, 33, D2, 8A, D4, 89, 15, F8, DC, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, F4, DC, 47, 00, C1, E1, 08, 03, CA, 89, 0D, F0, DC, 47, 00, C1, E8, 10, A3, EC, DC, 47, 00, 6A, 01, E8, 18, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, FD, 14, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.6525

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
407 KB (416,768 bytes)

Program Uninstaller
Program name:
Melodyne singletrack

Display publisher:
Celemony Software GmbH

Display version:
2.01.0202

Uninstall string:
"C:\Program Files (x86)\InstallShield Installation Information\{16DF894D-FC3F-4B87-908D-671E201CD7A8}\setup.exe" -runfromtemp -l0x0409 -removeonly


The file setup.exe has been seen being distributed by the following URL.

http://go.pcsoftupdate.com/.../

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.