How to remove setup.exe
setup.exe
The module setup.exe has been detected as PUP.ShiftBrowser
File Details
| Product Name: | Shift Installer |
| Company Name: | Shift |
| MD5: | 63f002ed50e80cc524210d2682625ab4 |
| Size: | 4 MB |
| First Published: | 2025-03-12 23:03:53 (11 months ago) |
| Latest Published: | 2025-10-21 23:01:21 (4 months ago) |
| Status: | PUP.ShiftBrowser (on last analysis) | |
| Analysis Date: | 2025-10-21 23:01:21 (4 months ago) |
Common Places:
| %localappdata%\shift\chromium |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\130.0.0.1768 |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\132.0.1.2048 |
| %localappdata%\shift\chromium\130.0.0.1768 |
| %localappdata%\shift\chromium\132.0.1.2048 |
Geography:
| 100.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000140000000 |
| Entry Address: | 0x0022ba50 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 3499520 | 24fce0a69cd14627da740bbf91161757 |
| .rdata | 468992 | 4fe9b62572e0c1d1e2782a3933c5cc80 |
| .data | 64512 | e339bc4166e9d44f6e9e173ff0bbefc2 |
| .pdata | 79872 | eb5c1671ea65f8fb22acfb440d8f80c1 |
| .gxfg | 12800 | b51ba012e737d3b252aaed7ea048ac6e |
| .retplne | 512 | daf679929e82d180bceb8491233f5884 |
| .rodata | 2560 | 956c856939278d142083bef02b9de040 |
| .tls | 1024 | 1f77f97c45c3aac34883e52bb6c73668 |
| CPADinfo | 512 | 60d3ea61d541c9be2e845d2787fb9574 |
| LZMADEC | 4608 | 05e9eab8428a551a281ab278073669fa |
| _RDATA | 512 | 64305f5a4ebb146e1f59746222c87296 |
| malloc_h | 512 | f38a7ecf333499bbb5be9a0a3186602b |
| .rsrc | 335360 | c8648ebd7711e7d57a7028e46ad14261 |
| .reloc | 10240 | 978d568addaed53a050b0410dab9bd0b |
More information:
Download GridinSoft
Anti-Malware - Removal tool for setup.exe
