home

setup.exe

Tuneup Pro

The Phone Support Pvt. Ltd.

The application setup.exe by The Phone Support Pvt has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from ttb.lpmxp2138.com and multiple other hosts.
Publisher:
tuneuppro.com   (signed by The Phone Support Pvt. Ltd.)

Product:
Tuneup Pro

Version:
Tuneup Pro

MD5:
b2dd740249b792048d960139ddf9ab3d

SHA-1:
50fe6bf4c98dc46b069d8a82f37543d6e4cb796d

SHA-256:
c0e32354664c008b5f215929438dfb622d92c09d443d2eb721c08390ac5ac299

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 8:47:29 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Systweak.ThePhone.Installer.Meta (L)
16.6.9.22

File size:
3.3 MB (3,490,384 bytes)

Product version:
1.08

Copyright:
© tuneuppro.com

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup.exe

Digital Signature
Signed by:
The Phone Support Pvt. Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/14/2014 4:00:00 AM

Valid to:
3/15/2015 3:59:59 AM

Subject:
CN=The Phone Support Pvt. Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=The Phone Support Pvt. Ltd., L=Jaipur, S=Rajasthan, C=IN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
63F838BFFC34EF94DD244DA012A2697A

File PE Metadata
Compilation timestamp:
10/13/2013 12:19:32 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:xfQB4UJA65Aq7NUmH/Mh0f/mxUWOSWM/c+T5N1:xfQB3JD5t7NVgOGU8TEiT1

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9764

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file setup.exe has been seen being distributed by the following 22 URLs.

http://ttb.lpmxp2138.com/download/request/.../xb9onqTr?__tc=1409350341.828&lpsl=e9ec718325e77297b001d00469a06751&expire=1409436720&tgu_src_lp_domain=www.dwldultimatesoftupdate.com&ClickID=31828061581409350319&PubID=119011&fileName=Setup

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=BnNDTphW07MSw089nFOpjmDSKecSxYT0qEiMsstSuzmHIyTC3Tejf4PfdEYXiiiymEhc-HFVtOMffpTiwY8QvzJNTTBHR629Nec6xHzZZF9oBPg7KP5skEBr5Q06yMq33Ju3f0ECLkgZkEdfktOBOkLQAaNAEsaXlG67CbZJaM08RaO7hrNEoyaj2YT446W2ivWt7SR8fPESqKNqMMKzTc1v0ADJaDAy7LEPhE15r7sA0AJTdLzYB2N90fb6rzqakaXNMPbpFzqeEzXn1vhJIXKkhna53fNOMHldIo-gE8ICIUfPFBqY2QTE1R2mmRJWNBL-SOgwI062mzNXQT7w2PSYJ8oGu03xFVQKXBjKVQ1wm40q0YNxeTY9IstM5GFIEmf5TAoDEqEvFyX9wbEjkdN70Xjl0nZyrawX&utm_campaign=newmarm245871060pe&vurlid=45871060&ccode=pe

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=idirect&utm_campaign=idirect_[pubid]_FR_Linkdo&ymid=BRtVdrLRHqxbhNtqy6FXOLyNWYXWpDZGZdy97FqF8wI5cbDddDXcKnyOeAvoa-qPCEev5TLfIk-hFMv1y-EGavAH6DR2FXqMsZTtArFdOGOgESwgPHEaTBCcaK9Wx_6IDsBAlU5cG_9GzXhM7zHbATXZav2gbk_BPaqlK68E3ekTrBkgTVgVpgGqNL55xXdMQmFApCnZRv5gO2C9HwjJgrVnxSB0WdiU8-YxrGUHtc7afAbYM2QoSrVIe6xYMB7NJyeWzzAzjuy0uUn39BDEP_sy-kNSVMfIX2qyNc53UABdsRfTLcjTe5jQYaTvNLZKBriu04X9XSG4I6oTYrcJ7vGJY-e9Vnd-TeQDZI6O2G6s5maex4Fn17QHM1kTVpZas6ZcssTV8NeFZOhmVgwJUnLmj3vv4gzwb3Kr34a00jIR_87RLsy6SXBEXK_0gG-t6Ho&ccode=FR_Linkdo

http://ttb.lpmxp1088.com/download/request/.../SuxgELn6?__tc=1410712522.361&lpsl=b5daaa409ae926d064cfaa02cf053e30&expire=1410797699&source=1&tgu_src_lp_domain=www.requiredinstall.com&fileName=Setup

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc&utm_campaign=mdc_1132906&pub_id=1132906

http://ttb.lpmxp2185.com/download/request/.../4oJMZuKP?__tc=1411434260.449&lpsl=6c6fe49610fa6adb1ab71bb5f1a5aa58&expire=1411560485&PubID=008806521&tgu_src_lp_domain=www.dwnltotalsoft.com&ClickID=008806521012621294604&fileName=Setup

http://www.lpcloudbox306.com/.../Setup.exe

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc&utm_campaign=mdc_1089745&pub_id=1089745

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=876vN59px1jhET-9E5Oi5bIKguS-0yl2aA5cVzkWtR3jcSF2eiStpk7ZQXp0Kjd-g-91oPyFymSH5FDOWcVyGZhGB8Jt86vY-8mM62sscYJhtzqZfyeo-3Ohae0_5qn_zRx1fVuxJczZvKcX6Z5mel3i974uVvNj6SmR01U79SlqmUziFUyvRylDEVcfHDEUqkbJc0d3Y5GEb93uynST552lGBdFreTOjnifv6vRgavlaeb8TgYB7KfybKvkhL7Mydb2gNYGuCLPhiQa2LWWXL9RYJApwVHtaRoQHYUZeAs-0cB6RAEGdWgM9tJnakhWFn7iGN0TFvOU8FIgM7K3BUg3XbSt895kKzfYExpHIiBMWE9ZFl7ssVrQgnmBkoBivrCXGLUuNrhXbP-6fT8v6eyyFoGDDXYzRPRYiERIWbO2YYB0bWFU9eIUzbZmGzNU210XcR0&utm_campaign=newmarm246651005br&vurlid=46651005&ccode=br

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=ZugqM9IsL0oVqipflPu8zJtSYNkv8gSVl0A-JRSJjGWMGgB2xBhv0hxTKxUjIWItMTm07FBq-ZcN_mkHt92RaS8nxT-FEEyKwHwL54wfR63BH8Y0Ls1hzAbNf_fUYlpsa_lG5PjHpYF_631T3dqL7Dkta2eFiMUHBbIKHLAjSgERygSbGUbelq1y4jMseSgvklbTWMz6pprlFXwTm_UC_tJa8pbBZG_qW2QOBW94Ix9uqwaKdzSxGe5aOxlihE2u9DNANVU6G9KE9DDlDJ46kZkFOqQfIW35mRaGD9k6x6mdw0fuYEMh4AkUAIHNEEBZJpE3Io7sWxikh9DrPZJUQnePdozHE2TQ7D-V4P2JvFrojOPkA5nRtTu63FSCX3gjkOtDYSKH3IUftHM7mRqKzp7BHdqJxTn3FyEqu9Q&utm_campaign=newmarm238821338no_grafiti&vurlid=38821338&ccode=no_grafiti

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matomynew&utm_campaign=myn523951&ce_cid=20zIxt3yZckryIwd1fG5Pu1xv9xp000.&pub_id=523951

http://ttb.lpmxp2156.com/download/request/.../xb9onqTr?__tc=1410224161.697&lpsl=b4b7fdb03e0a6c9bc9ee854c8d4e2702&expire=1410308830&tgu_src_lp_domain=www.updatedlw.com&ClickID=31878321281410222428&PubID=271585&fileName=Setup

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=TrQoHTT9-GXDR6utJ0WhVUkOmbHDUnkY4gUe876iwgltTk_EPZecgcx2wVWPDa9vxeMXxufFJR05GyD9fv-VtTmdoGw9-MJLZnpcGU6mxULg9JyH1iqjcfJ8pAb4OODJc4X4VWD-Fgy2pjm7s45moiW9vT99Qww1Uj8EV0pey2KWPCHYrrYjxgvQLdKR1J37SBjTJn3YBsCBUHBgDMfJnWO5eDqEUy2LyOocT3ut20FT_EfGcDOP5rCdp-UBsy1tePxDm8jeF69r1MKETEp5BpMuRtCopRKTjDUvdF5BKezlHwLkHvaNFSveCKeKK2eG2HuNBnt0OeI_l3dxIKv1VgJtQjKHhKFxsC3jzQ2SuNMYnJC44x3p6MOLIxMtTWpLMpFWByDui6WvnSEb8gw_jNk0Gzrt3PmcvQvcRJivIH-9x0O5Rf2UnLsbkJXYK2w&utm_campaign=newmarm235151133mx&vurlid=35151133&ccode=mx

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc1&utm_campaign=mdc1_974741&pub_id=974741

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc&utm_campaign=mdc_1132886&pub_id=1132886

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matdc&utm_campaign=mdc_1134676&pub_id=1134676

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=newmarm2&context=-IaEb0Ub6N1xvUQRK683XPUmg_fUpMsafPTcBIV3QjHlXGKmjwK2VmWukSap9Fmo9jsGtv9qi9JzNW1cXhADERHdB5rTULdumCbQvltOQvK0uJm9mGkoSzRwA2nubRRX_kVUAZuzobZWfxx5Xb9eneMnNY-sAby_g0POUu3tUP2KipuUwQNhXDcSpfop98I2qrujhFjW3VIm-fh5NHpHpENKvLvlgJ_fJHzwoMOVjzVubL_u4kuYFLrSmWLcfIUrF1eafSxcbmFEXmzCCgGrOiaUDjgqFa1CQTlOFAuISTkHNJ8RP8iHTq3A_lQM9YFPVHYLs3Jd5gwSJJq7_CjQ5XfvfLX5RvfOP0OPECd5U5zQhQiauIBudmeeoRjovfnq985UM2qiziRWXyVH2DYLjcyEHVoDLhWOciKZ8vPU4z77EcHVUPMywPo41CQIOAXX5QjyA50oeNU&utm_campaign=newmarm235151133cl&vurlid=35151133&ccode=cl

http://files.getsoftfree.com/get/click/.../?uid=2091--429--1400602135.7299&sid=FX_429&filename=Setup

http://tuneuppro.com/downloadip_2offerss.asp?utm_source=idirect1&utm_campaign=idirect1_[pubid]_US&ymid=HqyafdcVueUtn6bczd02xLrBF-wIsCtnpJ7sHLMBUCBjf9BkKRJ7fDo08ouGCl-Zi-MFYk08tE23-9rfHiGdnkcD_HwtkEl54vLnewaj3qDnce9LHuTrzXEKrNAWIR7NP6gmkcq2kTPbhe-7fvzZz9JMjNJhqTT-zNJJGecHdYJacjEbqNJtc9V0R-V1hF2NOaz5PoA1--5mvxnAGYJKK4vDc7g38tMjU5On64IBiCg5Nu7T_pp00ch1CBwdc-yIcbALhA2BYsvVjorX3aU3FA2YhlwKUthLBpaUduCfpoLmCZuXTMtDfrOg-PImZxOmy9Em_g6Ouuj1gM3otyxV64S23uQbQuyA4iYcUL6VQmJpGiB4bBUpxBTFqxXn_rSBxxDXdBSoCrlPoZGwNYztPwp0iyg9E2XcLvrDL2GsNf1zzyZbx8kN&ccode=US

http://cloudfront.tuneuppro.com/ip/2/.../setup.exe

http://www.tuneuppro.com/downloadip_2offerss.asp?utm_source=matomynew&utm_campaign=myn312721&ce_cid=20rrBx2v2UCiBKbT1Dt2tY1xx8IE000.&pub_id=312721

http://www.lpmxp2020.com/.../Setup.exe

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.