home

setup.exe

Tuneup Pro

TUNEUP PRO SOFTWARE SERVICES LLP

The application setup.exe by TUNEUP PRO SOFTWARE SERVICES LLP has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.tuneuppro.com and multiple other hosts.
Publisher:
tuneuppro.com   (signed by TUNEUP PRO SOFTWARE SERVICES LLP)

Product:
Tuneup Pro

Version:
Tuneup Pro

MD5:
7f1aed0b6b562f3dbc903275127231bc

SHA-1:
367ee768e94b85a136b05182934205b13f901f55

SHA-256:
d55c870e45ba3cc3b0758ba953dd500e5efc4c7bba0bc85a43ecbaf5498b9b6c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 8:26:14 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Systweak.TUNEUPPR.Installer.Meta (L)
16.6.9.22

File size:
3.3 MB (3,491,232 bytes)

Product version:
1.08

Copyright:
© tuneuppro.com

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
TUNEUP PRO SOFTWARE SERVICES LLP

Authority:
VeriSign, Inc.

Valid from:
9/25/2014 2:00:00 AM

Valid to:
9/26/2015 1:59:59 AM

Subject:
CN=TUNEUP PRO SOFTWARE SERVICES LLP, O=TUNEUP PRO SOFTWARE SERVICES LLP, L=Jaipur, S=Rajasthan, C=IN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
35D7DB9969A26A61EA6CD98715CB2023

File PE Metadata
Compilation timestamp:
10/13/2013 10:19:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:ctQc5DRto5gQM6WiWhKbeLP8LX2Vdvr5DOybuLY4dfESHB/9RmFxe6H+HewdALSk:UQc5LigAGMecXkDpyflXmFwI2H7ZjZi

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file setup.exe has been seen being distributed by the following 16 URLs.

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm1&context=hJkJWNeotmbqUDPY-Ipu2ylCDq3bplTwEKFryIDRKutN1w162MkstUpsfhez8MPtWYOi-kdgIhOT6Af4OZ0vk3tewAR6dfTzuNnRzZidTXCZhmMTshXHcf7D6NpNgPtS3r_cCH4ZQdLUCThUEzhBxw-ove7aZB0K1davsqNEy-Oq3E1dv1HTtPzWQgr-L5SKcDeHQfMchOkC_miEyZjM8o9NaCfUpQTFChEU5y_ehIqjkBcsKlDMaWOxh-ywesUFwdEllP_qaKNm5ftr-vMhS6qsrfPvCeAdRHAvJYSvVzUSQ9bHCIRMwO_Lh5o0n4FUgLJHUQ6_5GsHw7l4q_KkLYo19IWKs54aVK8GeU98BME_mKga-GssGWbKBj5vz-wwMC1kL0PnJ4f2e21itXh3PhpXKef-Y2iFD5cWL-ZR3Y2e&utm_campaign=newmarm146551019gr&vurlid=46551019&ccode=gr

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=idirect1&utm_campaign=idirect1_[pubid]_ROW_FagSU&ymid=_R-WHalSPJovTQgDUppUuQ0tc-K-ZR033qJ2cazMYMchaWC_nbkigXLoZ7HMn_F_uPLCNk77lnAbq6pk6Pf-SyQDVpsbwFPU1GSbLOMkE7INbd9BHh7wRl1vI97-8psI8U3CjIvpVXUT1wtzZu9u5m47VqvP4y4_GsCKZtcCSk_ZGwYILGqmFZbOULA5luDrUd2LdkMBEUwHMoux3MB4M4_QaEfF81xfyq4r5UeaMAPXVgXn84K1Vwfub87SRexEdFbZ7pT3fdsszwuPuUHUgDWiRPkB-kIiUk7DW0HMr7_fXBcmdqohn_JIN99YY-8pyhPjBwNB_6DXBTR3f-h--FKHLdmrgD01ryjKGpEKKER0uvFwDswBFQ-UcPDoyQmmn_mUYT0Azv0RUb4LKRfWM26LM1AqFqRN3dM0sCJ9u4TdUM7zcQ&ccode=ROW_FagSU

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=tlv&utm_campaign=tlv&context=TR_02CMVAGzzEKNS9K

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm1&context=-34kOnjYP8AZeQfqxGD1wFjtfD-3mqMJ5b_LZOhapUOG0wXElpq0K4ZmbyAQwOONd8lHe6vltpvkdKOsoDuMvMGwhPPqiIp6t06mRYBQOdn0tHLqfLVyuBUZKESkrbcoswarCjaJvQysFjGwWjuDGA5w4YmVml1JJvlfbnSqmctDTmQdnIjwMzPiJ4AScTy7YbRiZyqjeN-57VLSLaJBQGxZI79jWQJuGWq6jPaqT_ndkNKssHmzQgqp-8nLoKiX1Uz83RGLPw_3sRxY1fnk8-VNMLYM6e9cb9QJtdGW6e_lKr_lVa9_PYAIv8h2f11ly9fcTEm4my66FNjMzQ076tKRyZ-CbnOxms2B__TiaO7H5VFHfObrEkJAaxEwv-8wGopBlXkMcQZFLdZhRFQJ2Ph79MZTon6qBQq1IheTqr9nr4qzR6fzh5C8ktCPq5w03Xz2Mg&utm_campaign=newmarm137463204in&vurlid=37463204&ccode=in

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=_aEdUKjNuAam6KalvbQFSGBiZ8lc1CD4fnzxrMj-WIeYMrjbOOSX57hUproeUHk2n3dEdauzWnTqW7TxMrqSVyK5OCwcSlQMbGEdDi_B1nVuNVcA_Q13_m15YQkC4R1IOj3eymsqR-23j5vBzjGNZ19r7NuypDxCy5QvHT2Yii3JQ2Eh4s8f5KTKEAQTuV209gsJQudffEFcMLXSc3bBP8f8MYaprW8DYtEs3jdUzCvGD3Oq7bogpBMq_F_Nl2VAL2guGXXpFzwUbaRqdNLjt3xmLw4iqe7rhKulRfR9rarQ0LhptDgcHAdUoaDNlYXwml6L3kSXugb45eYrugiWI0uW_x4i9ogM9OBUI-PFAIjitT_SnMYpKa9UXBud5vgBnPUG0tViBU8jSNfw0hb9lfI-ilGuhzqLJB1qzrn1_Q2yp-Dy5hrCJptM&utm_campaign=newmarm240961632ec&vurlid=40961632&ccode=ec

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=tlv&utm_campaign=tlv&context=TR_02CMEVFzzEIJ6EL

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=8ljhjjDpolK4qqVT2HcFfCAa6PKVULY94h9ZA8yV0U0iKsj10El7MzmLqOgsiJVC6ga7RI3Zlu2FIbLNl957AvGOD63JhLiHYC90iEQLjm9dcAphKe2sC2tle5MWEi1esWGB78NqTNrqhX8fKPgEfAEIf8EPTQAOziz1ysESq1jEDMoZfp4uAG3KwV_OKtJdkBgQY7iezC-KEDRH9m7_U3jIN9ewW0vi2MHIZ-wzmHKZRL1qUXXbFWdRTkm-W3mbQoA_O98KnI0xb3KxUxZ0YYTj_F5av81W8NowDx873HdSAH3PQjZdQ1BHWPou-7dHrZymjbyW4U6C31sMvUbUxkABbKBsXDF03cgi4IkPz4EbhcU62rM1FyLBAzqZkFytlLyVvWQmQ_AvanmZCYTG52AbciW9lKoa_wHUWSIpRMuf9cSxTujtFoeKDi1DYvGURCLTiweWpy0NNA&utm_campaign=newmarm222971725fr&vurlid=22971725&ccode=fr

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=LrZnWsALUfsmPiyNRU77pWbu4ZsbRY8kivKLOKEM1ggtA8yIDun0e_2szdpklUsKLKwe0joHn-H_tgOyDiDsCST_bMbgwxR9OsvS3b68TITIJE38B4WhTMzty4gdlNQ6MDdvQD0IohGOREMdm_ruWcvG6zJZHfVFkTUJ0CFUJI_RCjKGVPYALmrj2_bzNNlzZVuY93t8x2DtU9QRQwwTcL0hulDotxFX5zK17_SLRZru4nLX3MNr6V4MKCmt-jwT1ez_inuE3Cma14dfbMvQ1WhbXX1d2DT5NLezjL7S4Csk36ZlJ4_-vj1lojwCF7sHY0MHHr7WNM5F6ew5U0oDLOIJa_Tp5aJZoop76YXxOpB54ZVqygqRiIsFNsb_mXBOLF5c5f7rNkmAFZXKBHtW3_6gnd9WvQk4K7uJFUEi0bSTV3gaDFjTbmqq4VSsV7dc&utm_campaign=newmarm235151133ar&vurlid=35151133&ccode=ar

http://ttb.43rxp7w9fh.com/download/request/.../ymriBSrn?__tc=1411840922.403&lpsl=28ef98647b35bd272bced14a2d2d3faa&expire=1411927180&PubID=9555-1004&tgu_src_lp_domain=www.dwnllistsoft.com&ClickID=Ym89MSZjaXBpZD00NDcwMDAmY2lzaWQ9N0Y2NUZGQTJDMjM5MDkwOTU4MTEyNzI0NiZjaXJpZD03RjY1RkZBMkMyMzkwOTEwMjk0ODMwNjAxJnNsaWQ9MCZzdWJpZD0xMDA0JmNpdWlkPTc4MjYxNDYyNzE5NjkyNTY0MDImc289MSZjcmlkPTExODExNTgmZXhjaWQ9MjImbW10PS0xJmNudHJ5PTI5JmNpY21wPTIzMTg5OCZwdWJpZD05NTU1&fileName=Setup

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm1&context=23wL_e3clUJ8F_5hAZJDKQ1Sfsdd_aNP_cvwF6qVi-8LqlnCC-rkXIcbMVpE244pWBS9WFDtDvOSgAbfJEu_hyF_gObnLyzUEhNj4WM4wstcT9G37PWzLSlkZh6Z8MXwzv5GXbaNe2jmw00xMCDBhKFNYf8qTKeZtW7exKUknsxJSZIsrsgrOTtyCaaSYxaD6RkSOqzIY7QvxkwD5b6qEB0VpBnm89KnTzuWaprcQUKyXYbBro6tK7RSCHdxbESuSBMFYLgn6RoPfDit3cpJexciT0ujOVm4p4lRX9jKUgSS8y4yRAzUwrbMleN_zjfZJffSVkyS8DYMzHg2oH0UxaH2-OklGXzfZBJjF6aomTdr6h8-o1miEc5lnN-fzqPUYqM6KzSjh1_NiF8D63Cb90OgT3ibW-GIoy4x1oDf-g3DM3l2eK5MEr5jlnVQDA&utm_campaign=newmarm135621080it&vurlid=35621080&ccode=it

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=ss1mUerYsIVpnOrVUO5dwCJsIbkSffnAMOkhHwVkFyOe1QTOIZiPi7qtVRddBNt2xb4OVqYMtHb6XIPTJAa1BPdvkeGq04E4BNspql0GlZKcaDWWIqQRwz1CkTst_6JuLWmhwDGunJDbeh3BLpQsjJIOwSQYkmUh6HWlSow0ORgIQoXGn7QLARhuOWQ2qQsC_gSZN86Zw2j3h60loksRWWzIbTUKBvNYHxER-9kj9udNRjGxLjTFMDtrmgdEDCo8XHsD3IpJaOKTnyureQ9TBGEm1RVN0VsAYQUo-4NnL6lhkU30smu5l6G52Y2SHccsV2W76D0tmIiIr53DmgmuFhw42Lcm2AvTmj8Vz9Q1YV-tkoeF8P242ZrfTpBDVDtrUg8h9Aetkq7ttKBghreJMGrgDzy-w9Z4f6okl3SNROAhUQr3hnbXh5a4RhlVa8yP&utm_campaign=newmarm236151202mx&vurlid=36151202&ccode=mx

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=marnewsp&utm_campaign=marnewsp_44791627_ca&context=U8nKxtqJDPglFx8slMHXcMLRtEWjeO3wwiv1riJvYbKxpHB33pfv7IYr0kepjwGZG74Ri4I5RuFBOq8CJ9IJz0UFMYUVkmsiGG8CEyeWQrz5C4ItqUW_KtMYbKZirugFng0D7PJF5aMq_Dsgui25p5RuOdtLwAiBqIEpTYe8n9pQL3R2U536kHV6KPl72n6QvFaRW367l8zNbi_ChhSpVbk6kqLXGhxJGcZfShvEFb6-ZOf2QoymJlRgAEMKMlXxGQBSLaN5bH4JT5l3LfiaKrH7FAu4kt7zg7YIzL8RJUDs-rxHoJ6W2_jKE5X30sgvJc0pTvTKVOXqwxZtXA2GGS3YVoDxqPdvku7Si9iry_oFJnpsOYEJsukFb0tEYv6hdGS_Ha9O2zR64__eM0ORSrgBs_pNrAm5dYqzyL8iqNTeq94FoFyK4pE&vurlid=44791627&ccode=ca

http://cloudfront.tuneuppro.com/ip/2/.../setup.exe

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=idirect1&utm_campaign=idirect1_[pubid]_ES_FagSU&ymid=fl5-qtYzHMfokifloLkkJvA6efac8u_lLaKeAQY3us5IiQzk1wKHDaWXXcgrioiX_PqNW233HQN4IPd1dTUc1VV88nU0jqIKY6U0suXzvmO5mITLadQkH1WVjr4PUbEqy1T_ygXwUEIs6KahImCDiBvmfcBF5e6YzqFe6AKaCwBteu5VQcKqG7icEsUl9clzoC-m4LB9lsU3mPUNFE5zxzBBN22fAl7-uhuuM0LCAw3XLnA7MHYShNlQMNOJeJhL98BLiEn-Jbgxuk5yOC1zhljKNq65yjJigxedhPewBcnm0HA559tbAFdD-9T9QJioPmFF9l_v_xAL2MCEan2NUTCWkYc0bn9HgSTfOCTYwIjLBs6AmNpsZCWh2lnmBGzaHaktCzVLTUMg1oNuJpqtzJl1wgmP9Yg_u1KaEFSWbjXX7XhiTNIfL8n2&ccode=ES_FagSU

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=u63cD-QmgaEsUpFe0K1Ajgkl3e7qblDqbki679JMZ9ziHyY1zRLncHoad1pyzTv8FxZzvifPM6hxADQnpM-06CaLIlN8S-WwMTaDBh4tmdDmdRy0hPwazjuSYSCXRVoaWyz-pNxz4GMQQVcLZAJ6Bm8JeCYrLE_2udIaGzRvYyxe29_HWbCuXWXBjcR0j7t6TbxA-hv_uCd7j2Zu69GQDsbKCQ3HsyTc6pfhDK2H2Z1jSR6cjjoBsmO3GSY1OafK4MZMxRKC2y35JetXifTzP9j8OAcEO1bDuEDo2exupaO37Lj0edq98z2CychwkPMPoPEp9HkxAvy9uVxYhDR_5K2qTvMiB1ky_WVOvGSf6DMR_HKzjV64qfBx7w9PjpkyrjXd0FaaRykW4i3a2D-S5FThi4YkAC6XfWnuuVkedzc-sKu8I3O6UxACDylesMxRsxXQ&utm_campaign=newmarm237463204gr_conduit&vurlid=37463204&ccode=gr_conduit

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=iad1&utm_campaign=iad1_js_&tid=JM1145-PX2.BQk3HXk&ccode=

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.