home

setup.exe

Data Protecto

Outreach Global Ltd

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program DataProtecto by XCloudSystems. This is installed with DataProtecto. The file has been seen being downloaded from software-files-a.cnet.com and multiple other hosts.
Publisher:
XCloud Systems  (signed by Outreach Global Ltd)

Product:
Data Protecto

Description:
Data Protecto Setup

Version:
2. 1. 2

MD5:
db2a30c3941a89a9367f99ca1efd8f55

SHA-1:
13279d8ae36fa03f8f8d390c66ed978a3843888c

SHA-256:
fb2276910f43281d50354ee4ebf12f4b51bfb48a5085130fa8a0353f19171ad8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:52:29 AM UTC  (today)

File size:
15.4 MB (16,099,224 bytes)

Product version:
2. 1. 2

Copyright:
Copyright (C) 2014 XCloud Systems. All rights reserved.

Original file name:
Data-Protecto.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setup.exe

Digital Signature
Signed by:
Outreach Global Ltd

Authority:
GlobalSign nv-sa

Valid from:
4/22/2014 10:26:04 PM

Valid to:
4/22/2017 10:26:04 PM

Subject:
E=admin@outreachglobal.net, CN=Outreach Global Ltd, O=Outreach Global Ltd, L=Road Town, S=Tortola, C=VG

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112198774A58B606ED7E6842CCB543BC3906

File PE Metadata
Compilation timestamp:
5/9/2014 7:15:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:b3xp1IFdQKw0hzZaKph7iq+I95MvSybPGxvvGMVkJmo:jvyQKw05YxYLybOxvvG7B

Entry address:
0x1512000

Entry point:
83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, D0, 22, 00, 2D, 2F, 60, 0A, 10, 05, 24, 60, 0A, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 67, C4, 94, 77, 68, B3, B4, 14, 51, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 83, FB, 8F, 2F, 33, B2, B7, E4, 11, 17, 5C, 2E, 6F, F9...
 
[+]

Entropy:
7.9878  (probably packed)

Code size:
482.5 KB (494,080 bytes)

Program Uninstaller
Program name:
DataProtecto

Display publisher:
XCloudSystems

Uninstall string:
"C:\Program Files (x86)\XCloudSystems\DataProtecto\uninstall.exe" -u


The file setup.exe has been discovered within the following program.

DataProtecto  by XCloudSystems
About 1% of users remove it
 
Powered by Should I Remove It?

The file setup.exe has been seen being distributed by the following 2 URLs.

http://software-files-a.cnet.com/s/software/13/77/91/.../Data-Protecto-dw.exe

http://www.dataprotecto.com/.../Data-Protecto.exe

Scan setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.