home

Setup.exe

MD5:
b256d97fbb697428b7a1286ea33539c0

SHA-1:
7e4e54e0434406746420141881f419ac165d3edc

SHA-256:
f70b370debd085dd9e9fb6495c796cdccf41c44574cc185dbe124f3ea8237623

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:30:00 AM UTC  (today)

File size:
26 Bytes

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup.exe

File PE Metadata
Compilation timestamp:
3/20/2003 2:49:19 AM

OS bitness:
Win32

CTPH (ssdeep):
3:qVZqcF4:qzY

Entry point:
3C, 68, 74, 6D, 6C, 3E, 3C, 62, 6F, 64, 79, 3E, 3C, 2F, 62, 6F, 64, 79, 3E, 3C, 2F, 68, 74, 6D, 6C, 3E...
 
[+]

Entropy:
3.3927

Packer / compiler:
RLPack FullEdition V1.1X * Sign.By.fly

The file Setup.exe has been discovered within the following program.

YoulikehitsROBOT  by CustomBotSolutions
www.youlikehitsrobot.com
About 8% of users remove it
 
Powered by Should I Remove It?

The file Setup.exe has been seen being distributed by the following 4 URLs.

https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=9333571d02&view=att&th=155560d43c752877&attid=0.1&disp=safe&realattid=1bc3e9c117297e37_0.0.2&zw&saddbat=ANGjdJ9xbawmInvaZRb7g-Xc0WJCCDCVubkuz4rR0idNCcFsvxfJ8GEdu3EORJ462xpH-6iPmuQBv-tdLsiY5iYsG_WEOOUVc_cogzjUK_NsBSo7ktx9ku8RvK26KZoS1a9ywNICX91ePZn03y2ZqElSrd54E-JaE8WGPfkvhbbdAVT_hm7lof3reMikxatPc5LKW2eGxooLCWUCcPDGPEBlA2yMvS6b2a2UCL9C18n-2HNIbK_BzPQOgaPjTNpOzPsoVBxaFUEox1PhYiVomSkZeUunNMxmPqJ68r4LhFjLw_PFZr0xjQJUpjIekuIjVt47VmhSGF5r8_8AbtuCdLX9owSROldmhT3r2j0INCU2m0GpwKPQkMjTWDRQ_Hrnpnn5u2hwYHtiMyNCA9pT2YkG_XTWKDmnqLq8-YH-ubuTxvbAaW9a-SCSEOdBNCZe7WJt6bkS_EbTypPPBV6F0khFx45-RGc-K4dywC2OwsO_q192utpewzAXHvG3n-_LaV5jihIe29dwy2jmJ6t3S36TT-AtfDczf-zwy5xqdgGhojW0InIk5n2XCUFjSKWEp7ETtnRbvLVHDm3sr1knQEhl-ozO1IuDh4qXPgNP-5cGKKHW5UodRnKsXO_zeNAegEZZQnqWNeJqW0-nnt4r

http://d.exfriendalert.com/ExFriendAlert/451/.../Setup.exe

http://d.exfriendalert.com/ExFriendAlert/451/.../Setup.exe

http://d.exfriendalert.com/ExFriendAlert/447/.../Setup.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.