home

shsetup.exe

MD5:
d41d8cd98f00b204e9800998ecf8427e

SHA-1:
48de6bdd0d69a94be51d46f1210fc0dc56359a9b

SHA-256:
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Scanner detections:
1 / 68

Status:
Clean  (1 false positive detection)
Whitelisted (by digital signature)

Analysis date:
4/26/2024 6:29:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Win.Reputation
16.3.1.15

File size:
2.5 MB (2,578,041 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\shsetup.exe

File PE Metadata
OS bitness:
Win64

The file shsetup.exe has been seen being distributed by the following 50 URLs.

https://dl.google.com/tag/s/appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={5D4597E0-C5E1-8B99-8B25-22F13B1D7ABB}&lang=en&browser=4&usagestats=0&appname=Google Chrome&needsadmin=prefers&installdataindex=defaultbrowser/update2/.../ChromeSetup.exe

http://tcgo-installer.s3.amazonaws.com/PokemonInstaller.msi

http://www.pokemontcg.com/get_download

https://aihdownload.adobe.com/bin/.../install_flashplayer17x32axau_mssd_aaa_aih.exe

http://boxesists.com/hp/?q=R7p4wDzudBv5f56789M6zVLM9umun39ugbfX7zPjaQ15PSwKK4 FEfLMMzGBZoaHoOYWsE91DjZMFbZoaQO6Woe1twokYek1 R2qlE2A/.../Jrzsvjsx8h3FypcBjrc5Hdk1gShbNlFcmUHmWnqce7vq3F7lUkBVG4JfjpDi&external_id=1416747499395682034

http://homela.net/717abab88f9eb36291b0f1b1c6520425/turboimage/dl.php?id=1416747499395682034&r=http://boxesists.com/hp/?q=R7p4wDzudBv5f56789M6zVLM9umun39ugbfX7zPjaQ15PSwKK4 FEfLMMzGBZoaHoOYWsE91DjZMFbZoaQO6Woe1twokYek1 R2qlE2A/.../Jrzsvjsx8h3FypcBjrc5Hdk1gShbNlFcmUHmWnqce7vq3F7lUkBVG4JfjpDi&__rnd=14380c6e21afa5551346a6a3207da7f6

http://www.colis-logistique.com/updatesite?version=3.550&fichier=install_inet_3.550.exe

http://www.ibxdnl.com/.../TVSetup.exe

http://www.ibxdnl.com/.../SportsSetup.exe

http://dragonset.info/download/v2921?self_redirect=0&filesize=1mb&product_file_name=Black Pete in The Netherlands _ Zwarte Piet moet een kleurtje krijgen.mp4&product_name=Black Pete in The Netherlands _ Zwarte Piet moet een kleurtje krijgen.mp4&product_title=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&product_download_url=http://srv38.clipconverter.cc/download/sc2lqZOA3HuwZGpqm5qXcHFp5KWmqWxw4pSXam1in2ZrY2m0qc/MqHyf1qiZpa2d2A==/Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&installer_file_name=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&st=0&IX_Startapp=1&self_redirect=0&reffer=http://www.clipconverter.cc&project_name=ClipConverter&layout_id=8&for_html_installer=1&uuid=Zuxsms3AJo9l0Jyj1AaD7jbAw9nIznsuV9BwJtNEU1EKo9KZNujRirOmzfKnDZM9QVguDTRQmZJ3MNDFKHJvHvEPJLTLUGi6Eu3qOPOQdDoKvEjBX5lW4OZgFJV

http://dragonset.info/v2921?self_redirect=0&product_name=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&filesize=1mb&product_title=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&installer_file_name=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&product_file_name=Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4&product_download_url=http://srv38.clipconverter.cc/download/.../Black Pete in The Netherlands | Zwarte Piet moet een kleurtje krijgen.mp4

http://www.singulardownload.com/download.php?version=1.1.1.20&campid=5547&instid[appname]=Metallica.Through.The.Never.3D.40201341.40108041p.BluRay.Half.OU.DTS.x264.PublicHD&instid[appsetupurl]=http://16.get.getmdownloader.com/files/MD_setup_1.0.16.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://.../static/md/images/logo_150.png&prefix=Metallica.Through.The.Never.3D.40201341.40108041p.BluRay.Half.OU.DTS.x264.PublicHD&instid[thankyoupage]=http://.../upgrade&ti1=w197s0i923p16e9c0&ti2=IVnaH1TZtGioLmXh0soU-J03GQ1GyQFXf4J1GYSr2kqqnNs-K7x_tpI4CBcSpo-3G3PtoK33G54EeplFQ_rZ3jM

http://getmdownloader.com/download/.../SWMtJ7X0WAkZrDbhTa0qwcx4FMatZt3NNhG5 9I912eSjgeyVizq4lWTDtuktkh45vWJuAcrM8nJas4c0pHbLX36z5sFWbpYhwed6A==&k=IYkqJg7NuEu0Tehp_SwbQUASB6au4IWihYQZHmySrRZyQTJwFBRcp3aKGDL9cn-VMposiA1LG8VN0e7rucEg0zA

http://download.spotify.com/SpotifySetup.exe

http://files.getsoftfree.com/get/click/.../?uid=1782--941--1397340979.8806&sid=FX_941&filename=Setup

http://files.getsoftfree.com/get/click/.../?uid=1865441949&sid=103180&filename=setup

http://files.getsoftfree.com/get/click/.../?uid=1782--941--1397161565.8262&sid=FX_941&filename=Setup

http://cdn.mediaprogramasgendelivery.com/?ic_user_id=9259

http://www2.ati.com/.../14-4-win7-win8-win8.1-32-64-sb.exe

http://download.bleepingcomputer.com/dl/589ef91e807072cd97f3b7212849dda5/54982f0a/windows/security/anti-virus/c/.../ComboFix.exe

http://software-files-a.cnet.com/s/software/14/06/42/.../reflectdl.exe

http://download.soft-disc.com/download/300/.../

http://appldnld.apple.com/iTunes11/.../iTunes64Setup.exe

http://download3.fyxm.net/download.php?id=14926

http://downloads.fyxm.net/download-file-14926.html

http://www.freefileopen.com/file-opener/gb/.../?dl=1

https://dl.google.com/tag/s/appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={8A1AA13B-686B-9BBF-E70B-62FE77C033F8}&lang=en&browser=4&usagestats=0&appname=Google Chrome&needsadmin=prefers/update2/.../ChromeSetup.exe

http://winrar.soft32.com/get/file/id/.../?lp=adwords&kw=Winrar&mt=e&ad=25477615758&pl=&ds=s&gclid=CNrFta_P8bgCFUQ6QgodpXIAUA

http://www.joydownload.com/wi/ec65f77d4c70f1acd168e29323a669aa/1/3/1/.../java-runtime-environment-7 Update 45 8 Build b115 Developer Preview.exe

http://www.sectron.com/en/info/.../163

Latest 30 of 400 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.