Setup.exe
Classification: Malicious
Setup.exe is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02. Detected by 5 antivirus engines.
Detection summary
- 5 antivirus detections
- 1 IDS alerts
- 49 processes observed
- 11 contacted hosts
- 7 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2025-06-08 16:00:04 | 2026-09-02 16:45:05 | malicious-activity |
Tags
suspicious evasive extracted_domain phishingSample information
- Filenames
- Setup.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 3018645 bytes
- MD5
01712494c8f22e61814ff28a0d963af1- SHA-1
5bcdd5ae5d48bdab6fa9b54bc38ec07d04c40124- SHA-256
254e7beced7b03acd1667b8903756419eac3fd0194c5791ff14c17cb73b35e65- First indexed
- 2025-06-08 15:38:10
- Last updated
- 2026-09-02 16:45:05
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/grayware_confidence_70% (W) |
| Kaspersky | VHO:Trojan.Win32.Gasti.gen |
| Trapmine | suspicious.low.ml.score |
| Webroot | W32.Riskware.Repack |
Network contacts
172.67.222.7 193.23.118.175 77.88.21.119 88.212.201.204 87.250.250.119 150.171.109.73 142.251.218.193 104.21.96.1 88.212.202.52 142.251.46.225 23.33.40.132
DNS requests
clients2.googleusercontent.com counter.yadro.ru edge-consumer-static.azureedge.net mc.yandex.com mc.yandex.ru repack.info url-repack.org
Process list
| Name | Command line |
|---|---|
| Setup.exe | |
| Setup.tmp | /SL5="$110276,2582048,54272,C:\Setup.exe" |
| unins000.exe | /VERYSILENT |
| _iu14D2N.tmp | /SECONDPHASE="%PROGRAMFILES%\(x86)\Schedule I\unins000.exe" /FIRSTPHASEWND=$203A2 /VERYSILENT |
| msedge.exe | --single-argument https://repack.info/ |
| msedge.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=121.0.6167.160 "--annotation=exe=%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=121.0.2277.112 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x2f8,0x7fffe078bf98,0x7fffe078bfa4,0x7fffe078bfb0 |
| msedge.exe | --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2164 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=3932 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:3 |
| msedge.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4012 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=renderer --no-appcompat-clear --first-renderer-process --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1749417910193358 --launch-time-ticks=4463453126 --mojo-platform-channel-handle=4352 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:1 |
| msedge.exe | --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1749417910193358 --launch-time-ticks=4464042167 --mojo-platform-channel-handle=4524 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:1 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4680 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4584 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --no-appcompat-clear --mojo-platform-channel-handle=4996 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4688 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5288 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5132 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4880 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5232 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4736 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=3788 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4908 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=price_comparison_service.mojom.DataProcessor --lang=en-US --service-sandbox-type=entity_extraction --no-appcompat-clear --mojo-platform-channel-handle=5172 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --mojo-platform-channel-handle=5132 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| identity_helper.exe | --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5992 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| identity_helper.exe | --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5992 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5944 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=6260 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=6356 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=6588 --field-trial-handle=2180,i,10806205886625229307,4376977181304496114,262144 --variations-seed-version /prefetch:8 |