» setup.exe
Overview
Analysis
File Details
Behaviors (1)

setup.exe

Examine3D 4.0

Rocscience Inc.

This is the uninstaller utility registered in the Windows Control Panel for the program Examine3D 4.0 by Rocscience.

File name:

setup.exe

Publisher:

Rocscience (signed by Rocscience Inc.)

Product:

Examine3D 4.0

Description:

InstallScript Setup Launcher Unicode

Version:

4.103

MD5:

79ed9842d18f51aa68c7cdfd86760cf2

SHA-1:

b1bbe1de6df7c3879d3e907bfb54975000720870

SHA-256:

e5bbe9841ed417fc7626a2e621a7d253f0006b930bfc767a70b31fd13ce6dbf5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/6/2024 1:21:34 AM UTC (today)

File size:

1.1 MB (1,199,832 bytes)

Product version:

4.103

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\installshield installation information\{a263ac27-f44e-45ff-aed7-ab417664f4a3}\setup.exe

Digital Signature

Signed by:

Rocscience Inc.

Authority:

COMODO CA Limited

Valid from:

8/25/2015 12:00:00 AM

Valid to:

4/28/2016 11:59:59 PM

Subject:

CN=Rocscience Inc., O=Rocscience Inc., STREET="439 University Ave, Suite 780", L=Toronto, S=Ontario, PostalCode=M5G 1Y8, C=CA

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

119262AAF85982CF6EB081EDCB2911B9

File PE Metadata

Compilation timestamp:

6/8/2015 3:57:36 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

24576:SmDz2LDKKw58+fIuO+icN4E0CwDllllZSVhHeqsCrzW:DDzeTw58+fIutDEPllllUVhJ/a

Entry address:

0x5E1AF

Entry point:

E8, 1A, D9, 00, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 3C, 83, 7D, 08, 00, 75, 13, E8, C7, EE, FF, FF, 6A, 16, 5E, 89, 30, E8, 8D, 6A, 00, 00, 8B, C6, EB, 25, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 09, E8, A9, EE, FF, FF, 6A, 22, EB, E0, 50, FF, 75, 10, FF, 75, 08, E8, 93, CB, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 55, 8B, EC, 33, D2, 8B, C2, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 39, 11, 74, 09, 40, 83, C1, 02, 3B, 45, 0C, 72, F2, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC... 
[+]

Entropy:

6.6918

Code size:

686.5 KB (702,976 bytes)

Program Uninstaller

Program name:

Examine3D 4.0

Display publisher:

Rocscience

Display version:

4.103

Uninstall string:

"C:\Program Files\InstallShield Installation Information\{A263AC27-F44E-45FF-AED7-AB417664F4A3}\setup.exe" -runfromtemp -l0x0409 Uninstall -removeonly

Scan setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.