» Setup.exe
Overview
Analysis
File Details
Behaviors (1)

Setup.exe

JMicron Setup Application

JMicron Technology Corp.

This is the uninstaller utility registered in the Windows Control Panel for the program JMicron 1394 Filter Driver by JMicron Technology Corp..

File name:

Setup.exe

Publisher:

JMicron Technology Corp. (signed and verified)

Product:

JMicron Setup Application

Description:

Setup Application

Version:

1, 1, 0, 22

MD5:

4a3ccbe36e79739c16eb527c51407a22

SHA-1:

fee040ccd1e5cbc5fc005524038a186f2f75d990

SHA-256:

7caf00e8f5ec22799fa04747130c90f7f773c29eff5e73a56fe8f1e91d5e5585

Scanner detections:

11 / 68

Status:

Clean (11 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/27/2024 1:23:06 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

W32/Virut.X

7.11.30.172

avast!

Win32:Patched-JI

2014.9-160212

AVG

Win32/Slugin.A

2017.0.2836

Clam AntiVirus

Trojan.Spy-59563

0.98/21257

Dr.Web

Win32.Wplugin.1

9.0.1.043

ESET NOD32

Win32/Agent.NAG virus

10.7.0.302.0

F-Prot

W32/Slugin.B

v6.4.6.5.141

McAfee

Virus.W32/Wplugin

5600.6492

Microsoft Security Essentials

Threat.Undefined

1.213.2713.0

Sophos

Virus 'W32/Slugin-A'

5.23

VIPRE Antivirus

Threat.4314870

46444

File size:

1.1 MB (1,198,680 bytes)

Product version:

1, 1, 0, 22

Trademarks:

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\jmicron\johci_dir\setup.exe

Digital Signature

Signed by:

JMicron Technology Corp.

Authority:

VeriSign, Inc.

Valid from:

7/20/2010 2:00:00 AM

Valid to:

7/26/2012 1:59:59 AM

Subject:

CN=JMicron Technology Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=JMicron Technology Corp., L=Hsinchu, S=Taiwan, C=TW

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

57F5B9788EE6D73B698B7167E08F4C3D

File PE Metadata

Compilation timestamp:

7/30/2010 10:59:36 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:c087mhgOhbhvIvgj9X2kK5ttQxj7hy1BhD:cZdQFvIvgj9X2kK5ttQpg1rD

Entry address:

0x16C0B

Entry point:

E8, C9, 4B, 00, 00, E9, 17, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 00, 01, 00, 00, 72, 0E, 83, 3D, E8, FF, 43, 00, 00, 74, 05, E9, 78, 4C, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83... 
[+]

Entropy:

7.0757

Code size:

176 KB (180,224 bytes)

Program Uninstaller

Program name:

JMicron 1394 Filter Driver

Display publisher:

JMicron Technology Corp.

Display version:

1.00.21.00

Uninstall string:

"C:\Program Files\JMicron\JOHCI_DIR\setup.exe" delpkg

Scan Setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.