home

setup.exe

K9 PCFixer

The Phone Support Pvt. Ltd.

The application setup.exe by The Phone Support Pvt has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.k9pcfixer.com and multiple other hosts.
Publisher:
K9 Tools   (signed by The Phone Support Pvt. Ltd.)

Product:
K9 PCFixer

Version:
K9 PCFixer

MD5:
c7ba61bdbc6d8b1fd7a578e5b77eec49

SHA-1:
374104953ef78d29436f2475ef85d6aa44e64b5d

SHA-256:
622c8d5f06dca71682a14da838149237e40c8a0cb3843de755bc6b334496303e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 9:36:49 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Systweak.ThePhone.Installer.Meta (L)
16.6.9.22

File size:
3.4 MB (3,551,296 bytes)

Product version:
1.8

Copyright:
© K9 Tools

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\setup.exe

Digital Signature
Signed by:
The Phone Support Pvt. Ltd.

Authority:
Symantec Corporation

Valid from:
2/24/2015 1:00:00 AM

Valid to:
4/25/2016 1:59:59 AM

Subject:
CN=The Phone Support Pvt. Ltd., O=The Phone Support Pvt. Ltd., L=Jaipur, S=Rajasthan, C=IN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
7F23F6ED6819802B6764EB2DC60A83C1

File PE Metadata
Compilation timestamp:
7/9/2014 9:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:mMcgaEgIAWZy3wZ50iZRcrqnRDHKwa/1e1ZYfI2O:m8aEgHWW+jXLRDVaA8fI9

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file setup.exe has been seen being distributed by the following 50 URLs.

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9softros&utm_campaign=p9softros_es3

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_es3

http://files.ba-bamail.co.il/.../setup.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9softros&utm_campaign=p9softros_glo1

http://get1.ddlmedia.info/.../Get?p=3022&d=20297&l=1694&n=0&d1=365452&d2=-1&d3=-1&d4=-1&d5=-1&filename=setup&clickid=wGQS0CJT9KONNJIHGDL0BA9I

http://en.softonic.com/sads/tracker.php?ev=c&co=SI&sid=bba453f6e8c1a6128bca93d00fe6ac1d&upv=f57344658e571a587ee6ee78a32994a1&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60D9C1615EAD9C5AEC3458B19777D19814920A5993D9F9F799EA18597BFF15D0C836B7942908BB820A58785B4EA7702BF3D0C79E47D7F46F76F6F014B17EDCE160867DDBFC6CDC75253E24B1EE591E5EF9E5D54469873D0D3F3C0C527C543E17EF91EB40B96A6CA86F7FA34E45580B2E5F4&h=A5991702BC4F9A7F81CDD073AC457D9537F49D3E82BE47D539942807F918799C&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://en.softonic.com/sads/tracker.php?ev=c&co=QA&sid=b76e81c42f80a9d80d876d4dbb50c254&upv=f1fb78c52ae4ef90cebd7aa3a89ee2f7&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60D9C1615EAD9C5AEC3458B19777D19814920A5993D9F9F799EA18597BFF15D0C835317D26413311FEDC3CCF96C4DFEF1674C573274F174A7182AF6295F55ED066CD1D880B28D0BFAE6A791D528C256A450F4CE5CA746138A0BB598C625E9CCF14859A82F782D3D73361834C421F2E44DB2&h=599DCFD51F6A25AC51F5734F889886594B41701A86376CDE6933080EB5382F02&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://fugdownload101.com/Download?lpm_id=46

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_br7

http://en.softonic.com/sads/tracker.php?ev=c&co=IL&sid=d73902cd46103bb5489dfcda11b83455&upv=09c7d13c8bf94a96428420a17f0463f4&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60DDDAC6239EB7C9840D902AB8F7B1D2A9103B84440C383CBF67FB3F9A5FD7A63DF696F31BF9B57C3A9BE1FDA022DC3CA47A3C02B45B134B80663B4864C49F32AA4D10C50A06B74BBBC07C00CEEE1B75486A48947CD7B697D73C975621025976D4C74A922BEC834FEF101484476DE356826&h=0307773E2A0C6B011D98FAA02B1F9497A8729A5033787A4F1E96BAC4F5B5FA3A&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://en.softonic.com/sads/tracker.php?ev=c&co=PS&sid=4aa0896a9e0d9d4894177cab43213e93&upv=25fda7df643772bc4b496cd4bdc63581&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867847AA4898F760F4B5D58BBAD04201EFC31C9AAA0208CCE8ED284F494C992F20E4F3D6972C70AE19BEDF8706540902843DC1BEE1EF263B4974810B4440D95DDCA3107CC0798C291EE5279B24B696E946079FBF2FB795F0F0FE4B09698243447AC9CA7E81D0C6427CDD7E746A565F38CE6979C0DECDE45EAAAEE101E33C5964A9B&h=0A4D70AF46626098E8E92B44DF4796C7E6E8CAA4EE1087D0961B0A6EC716E081&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://www.supertuneup.com/downloadip_allcs_dcom.asp?utm_source=dcomnew_sec_728&utm_campaign=dcomnew_sec_728

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_it7

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=e4b36dc1dd604fa30de3c0c4d8ac64b4&upv=e40ab6436f38f4ad23d5899e3e4a14fe&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60D9C1615EAD9C5AEC3458B19777D19814920A5993D9F9F799EA18597BFF15D0C83260DDDEFE9665CBB7DDEA43A2AC05A110BD057DD08C251A72FA7A3E2146839E011B9A49ECFB27E731DF81E9AA6FF174262A29F65CBF8743A1504BDA7C1B3A764066F0D4CA038312FFAB6C0447B90B1AC&h=A722CA2927ADD08335297F5D0A916649AFE091DB69626C75A483F6D0461693AD&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://en.softonic.com/sads/tracker.php?ev=c&co=PS&sid=9b7118b68188da69dbec4358dde20767&upv=12f6ef704860f3bf4f7cf9e3f2d36ca0&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60D9C1615EAD9C5AEC3458B19777D19814920A5993D9F9F799EA18597BFF15D0C836056413BF1CB6E39AD814F98716AB00DA9AF48E4772B54922704DF690EE16A84E10042A00AAD21BB471B86BD362DF703FFD4F1F1A79B6AE43B51716C8DB102107EF68D4C4FB94B0FDDA3A303F7D54102&h=8566650BC06F6977C7E86EBF52BD31F35B30D8E24EAD431F0465B2E48DF247A8&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

http://download.smartpcfixer.com/.../setup.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_de7

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_glo3

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9softros&utm_campaign=p9softros_it3

http://www.lpmxp1001.com/.../Setup.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_nl7

http://www.chessapps.net/.../setup.exe

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_it7

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_nl7

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_us7

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stsec&utm_campaign=p9stsec_nl3

http://default-page.com/real?pid=3022&distid=3509&clickid=ZidXVpZD1jMWFiOWJlZS00YTZmLTQ2MzgtOWExOS04MGJlMDc2NTliNjk

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_us7

http://www.moozybox.com/download.php?a=80&tid=400

http://en.softonic.com/sads/tracker.php?ev=c&co=PT&sid=c8bc58d4f65bfdad23d6e8ec3028eaad&upv=7c00e5a5e76aa25001c0877d5f1edbe4&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E036C6ABD86CA63A494CC3E4EB139EFEADD7CA2477DA3477A27FB5A1501B5EF4867182FF6D0503FE0F03C9D71DBB414A60D9C1615EAD9C5AEC3458B19777D19814920A5993D9F9F799EA18597BFF15D0C83A7199BE136BFA90BD1BB9AFF8E3429AB510002969352920F8F018217416C300ACF99B3C6A9C5EF95F0D7C6B9D71205EC8DA846A7C7C677FFD87FB4333503E43D0B4A95D084F66380B702A0927A2A9E70&h=450500668C097FE936F9633E3B8B46B6DF8F92FCA386822FD7969C13C668EC62&directdownload=1&f=69706537&d=http://.../downloadip_allcs_dcom.asp?utm_source=p9stads&utm_campaign=p9stads_glo

Latest 30 of 52 download URLs

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.