How to remove setup.exe
setup.exe
The module setup.exe has been detected as Virus.Neshta
File Details
| MD5: | d469a3a77f27c430bf5d65e6b6335764 |
| Size: | 492 KB |
| First Published: | 2017-07-21 14:06:10 (8 years ago) |
| Latest Published: | 2024-12-07 23:05:01 (10 months ago) |
| Status: | Virus.Neshta (on last analysis) | |
| Analysis Date: | 2024-12-07 23:05:01 (10 months ago) |
Common Places:
| %sysdrive%\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c |
| %sysdrive%\msocache\all users\{90120000-0018-0000-0000-0000000ff1ce}-c |
| %sysdrive%\msocache\all users |
| %desktop%\nova pasta\nova pasta (3) |
| %sysdrive% |
| %profile%\downloads\ms office professional 2007 english v1014 |
| %sysdrive%\с диска с рабочего стола\новая папка |
| %profile%\yandexdisk\работа\visio 2007 |
| %sysdrive% |
| %desktop%\visio 2007 |
Geography:
| 25.0% | ||
| 17.9% | ||
| 17.9% | ||
| 7.1% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% | ||
| 3.6% |
OS Version:
| Windows 7 | 72.4% | |
| Windows 8.1 | 13.8% | |
| Windows 10 | 6.9% | |
| Windows Server 2012 R2 | 3.4% | |
| Windows XP | 3.4% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000080e4 |
PE Sections:
| Name | Size of data | MD5 |
| CODE | 29696 | ca3464d4f08c9010e7ffa2fe3e890344 |
| DATA | 1024 | 7ffc3168a7f3103634abdf3a768ed128 |
| BSS | 0 | 00000000000000000000000000000000 |
| .idata | 2560 | 6e7a45521bfca94f1e506361f70e7261 |
| .tls | 0 | 00000000000000000000000000000000 |
| .rdata | 512 | 7e6c0f4f4435abc870eb550d5072bad6 |
| .reloc | 1536 | 16968c66d220638496d6b095f21de777 |
| .rsrc | 5120 | 641ee4a318b75ddd974bb81a15a296c4 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for setup.exe