home

setup.zip

The file setup.zip has been detected as a potentially unwanted program by 4 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cdn.broadinstallwarehouse.com.
MD5:
0d39d94cd717664b2c681d0526541447

SHA-1:
b7ca4d857526ed9de0a5d1b1ac741b9b290884dc

SHA-256:
b6f854411cf7c456da034453a319da5af2854a7d38e2612f2238fcd65c557c2b

Scanner detections:
4 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/28/2024 11:56:45 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3018

Dr.Web
Threat.Undefined
9.0.1.05190

ESET NOD32
Win32/InstallCore.AAJ potentially unwanted application
7.0.302.0

VIPRE Antivirus
AdGazelle
42862

File size:
785.9 KB (804,745 bytes)

Common path:
C:\users\{user}\downloads\setup.zip

The file setup.zip has been seen being distributed by the following URL.

http://cdn.broadinstallwarehouse.com/c?x=Q8AHInvMJma1Gh2UF5dFj8lOjVzTIGKgMNsmuXQjo7c=&c=1oYe6mpgKJrOjmMQ3iF3rbOqt2VEPBcvtMIx/ZYWWI7sWHKEDsdaY9VoepDE8Jwo6Tewfbw7KJI7OhVzCpUT1AHIOa1U2CacyEJxjDgQOE89XPsNdUrlocU4t9PmSEySJ8rdFW4S4vlu08V03699MQ==&fallback_url=http://fugdownload110.com/download/.../8179?lpm_id=39&blocksdk=ironsrc&

Remove setup.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.