home

vsusetup.exe

Revo Uninstaller Setup

VS Revo Group

This is a setup and installation application. The file has been seen being downloaded from letoltes.szoftverbazis.hu and multiple other hosts.
Publisher:
VS Revo Group Ltd.  (signed by VS Revo Group)

Product:
Revo Uninstaller Setup

Version:
1.9.3.0

MD5:
1c84e048b8e6311f552085ce74151f2f

SHA-1:
bff87edb170fe716dcb293d71e297c088c8473e2

SHA-256:
2192b5fad42020afce22c0ec1745e923be6af0be42a85dbd18b9cf30d388046d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 12:46:53 AM UTC  (today)

File size:
2.5 MB (2,617,176 bytes)

Copyright:
Copyright VS Revo Group

Trademarks:
Revo Uninstaller is a trademark of VS Revo Group

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\vsusetup.exe

Digital Signature
Signed by:
VS Revo Group

Authority:
VeriSign, Inc.

Valid from:
12/20/2010 8:00:00 AM

Valid to:
12/19/2013 7:59:59 AM

Subject:
CN=VS Revo Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=VS Revo Group, L=Ruse, S=Ruse, C=BG

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
017BF223028469B14729A770A1F0EA2D

File PE Metadata
Compilation timestamp:
12/6/2009 6:50:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:UACOU9+OcclNwztxE7ZkaBS8lY72jt36SOHmQtgiW0f+/tIromxzk:c39jlNwztG7ZNSY6SOva4hxzk

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9922  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file vsusetup.exe has been discovered within the following program.

CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
 
Powered by Should I Remove It?

The file vsusetup.exe has been seen being distributed by the following 50 URLs.

http://letoltes.szoftverbazis.hu/IyREQaUy4EjaNv5mt1OQvw/1483192152/.../revosetup.exe

http://letoltes.szoftverbazis.hu/xBmLhaibGlkFskQO3XA-lA/1455376559/.../revosetup.exe

http://letoltes.szoftverbazis.hu/Dh_NLMDQ00yF53ejWKWacQ/1477409543/.../revosetup.exe

http://letoltes.szoftverbazis.hu/e6rWr70duplSklv5rn_slQ/1479931526/.../revosetup.exe

http://dl.cdn.chip.de/downloads/.../revosetup193.exe

http://letoltes.szoftverbazis.hu/hFkqxbgQXaQx6og1rC1HFw/1477405537/.../revosetup.exe

http://letoltes.szoftverbazis.hu/EGMuDt_kVnqJL-fZK8KdgA/1453670576/.../revosetup.exe

http://letoltes.szoftverbazis.hu/B5O9nJuXITZiUDItLKuuaQ/1401730202/.../revosetup.exe

http://letoltes.szoftverbazis.hu/LwgSYBpX5yaCPxENlyXnSA/1446971363/.../revosetup.exe

http://letoltes.szoftverbazis.hu/ny04ejvHiBbZMcWoaATNwg/1447097298/.../revosetup.exe

http://letoltes.szoftverbazis.hu/e73JUVdFjTZuwW4eyOzkOg/1459960438/.../revosetup.exe

http://letoltes.szoftverbazis.hu/4MIEZqef3Wwvby3eFgz1tw/1475140089/.../revosetup.exe

http://letoltes.szoftverbazis.hu/eueokWgBT3BNZBYjelp_IA/1478766195/.../revosetup.exe

http://letoltes.szoftverbazis.hu/11BW4lTBwYoGEXzk1T1_EQ/1480221737/.../revosetup.exe

https://docs.google.com/uc?id=0B1GIZ4LktVx0UjlQOXpkZERkYnM&export=download

http://letoltes.szoftverbazis.hu/PMSXyzU4oWBvAtJU71XgAw/1476190023/.../revosetup.exe

http://letoltes.szoftverbazis.hu/kXRulG6Nz9DCIPK5_5K2gQ/1474280357/.../revosetup.exe

http://kulenko.com/.../revosetup.exe

http://letoltes.szoftverbazis.hu/B6rk_GqXGD0pILkma5QUAA/1460401631/.../revosetup.exe

http://letoltes.szoftverbazis.hu/fdisYJGHiGr8-MKzG8mVJA/1466374288/.../revosetup.exe

http://letoltes.szoftverbazis.hu/kJRwE8NJui5fO_65uKriVw/1468140078/.../revosetup.exe

http://letoltes.szoftverbazis.hu/G3e05f1FFYVEeFccGxEszQ/1421579227/.../revosetup.exe

http://letoltes.szoftverbazis.hu/QSjpkVgGb2Sax9QUg03AbQ/1454943188/.../revosetup.exe

http://letoltes.szoftverbazis.hu/GRmcBNJLbQgyYPEns294eg/1464958654/.../revosetup.exe

http://c0464521.cdn.cloudfiles.rackspacecloud.com/revosetup.exe

http://letoltes.szoftverbazis.hu/w6kKJb8GUVikG0tHOvIRFA/1460061626/.../revosetup.exe

http://letoltes.szoftverbazis.hu/inMhXhvirW4HANwFQmbQgg/1459949225/.../revosetup.exe

http://letoltes.szoftverbazis.hu/SjuLHjGpNOYDVnuaqIG7Uw/1457461857/.../revosetup.exe

http://letoltes.szoftverbazis.hu/FTfCuZFXnGN7QSBxScIQCA/1398371314/.../revosetup.exe

http://letoltes.szoftverbazis.hu/k3WqZM39rFyrlJ3_G8aHDg/1439670542/.../revosetup.exe

Latest 30 of 52 download URLs

Scan vsusetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.