home

Setup.exe

NCH Software

This is installed with Express Dictate. This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser. The file has been seen being downloaded from files.brothersoft.com.
Publisher:
NCH Software  (signed and verified)

Description:
Express Dictate

Version:
5.26

MD5:
2c1101176ea006a756a2815ac03355f3

SHA-1:
b114161a8a02cfdf57181d7f7d4081a4fa1cc98f

SHA-256:
b49e7bfa597f9f09d0515b6cffca0facef341154a672c21d83b55224600d3356

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:45:14 AM UTC  (today)

File size:
589.1 KB (603,208 bytes)

Copyright:
NCH Software

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/24/2010 5:00:00 PM

Valid to:
8/3/2011 4:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
68C35978C8EC7147CF6D69A1E5F11396

File PE Metadata
Compilation timestamp:
3/14/2011 6:18:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:FGXA+LF0OWyQ8KHd1HSns9ME4tjhZ10Vv9ifNxTSfNU:FGXH0dR5is8jhZ1txTSfNU

Entry address:
0x2025

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, 6C, 0D, 00, 00, 53, 56, 57, 68, A0, 10, 40, 00, FF, 15, 18, 10, 40, 00, 68, B0, 10, 40, 00, 50, 89, 44, 24, 18, FF, 15, 48, 10, 40, 00, 33, DB, 3B, C3, 89, 44, 24, 0C, 75, 3D, 6A, 24, 68, C4, 10, 40, 00, 68, F0, 10, 40, 00, 53, FF, 15, 74, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, 30, 12, 40, 00, 53, 53, FF, 15, 6C, 10, 40, 00, FF, 74, 24, 10, FF, 15, 00, 10, 40, 00, 33, C0, 40, 5F, 5E, 5B, 8B, E5, 5D, C3, B8, 9C, 00, 00, 00, 8B, D0, 8D, 8C, 24, A8, 00, 00, 00, 88...
 
[+]

Entropy:
7.9571

Developed / compiled with:
Microsoft Visual C++

The file Setup.exe has been discovered within the following program.

Express Dictate  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
25% remove it
 
Powered by Should I Remove It?

The file Setup.exe has been seen being distributed by the following URL.

http://files.brothersoft.com/business/.../edsetup.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.