Setup.exe

File

VerIfieD software snb

This is the OutBrowse Revenyou installer which bundles offers for additional third party applications that may be unwanted and installed without consent. The file Setup.exe by VerIfieD software snb has been detected as adware by 19 anti-malware scanners. The program is a setup application that uses the OutBrowse Revenyou installer. According to AVG, this software downloads additional adware offers during setup. This downloadble file is typically blocked through Google's Safe Browsing technology in Chrome web browser.
Publisher:
VerIfieD software snb  (signed and verified)

Product:
File

Version:
1.9.3.0

MD5:
4fb5d9774cc56661b6395689345d83c6

SHA-1:
97c9896f7b2fd1a61d247e60a104755c99e53573

SHA-256:
93df2de930a333f284eb28c2c390aa7a00c0ca54173b9f852a482e4276731364

Scanner detections:
19 / 68

Status:
Adware

Explanation:
Bundles additional adware offers during download and installation using the OutBrowse installer.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/21/2025 8:13:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Dropped:Trojan.Generic.13115166
6216384

Agnitum Outpost
PUA.OutBrowse
7.1.1

AhnLab V3 Security
PUP/Win32.OutBrowse
2015.04.09

AVG
Downloader
2016.0.3145

Bitdefender
Dropped:Trojan.Generic.13115166
1.0.20.495

Dr.Web
Trojan.DownLoad3.36217
9.0.1.099

Emsisoft Anti-Malware
Dropped:Trojan.Generic.13115166
9.0.0.4799

ESET NOD32
Win32/OutBrowse.BU potentially unwanted application
7.0.302.0

Fortinet FortiGate
Riskware/OutBrowse
4/9/2015

F-Secure
Dropped:Trojan.Generic.13115166
11.2015-09-04_5

G Data
Dropped:Trojan.Generic.13115166
15.4.25

Malwarebytes
Trojan.Agent.ED
v2015.04.09.03

McAfee
Program.Adware-OutBrowse.e
16.8.708.2

MicroWorld eScan
Dropped:Trojan.Generic.13115166
16.0.0.297

NANO AntiVirus
Trojan.Win32.DownLoad3.dqapeg
0.30.10.952

Quick Heal
Adware.NSIS.OutBrowse.A
4.15.14.00

Sophos
Generic PUA OA
4.98

Trend Micro House Call
Suspici.593F1237
7.2.99

VIPRE Antivirus
Threat.4150696
38950

File size:
1.1 MB (1,101,168 bytes)

Product version:
1.9.3.0

Copyright:
File

Original file name:
Ionic.Zip-2015Apr03-033101-41ede6fb-d965-4564-bb16-0746f7ee6321.exe

Bundler/Installer:
OutBrowse Revenyou

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
3/31/2015 8:00:00 PM

Valid to:
1/27/2016 6:59:59 PM

Subject:
CN=VerIfieD software snb, O=VerIfieD software snb, L=Dublin, S=Dublin, C=IE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
38FEDA1FC39FD50426002D9E7A0F866F

File PE Metadata
Compilation timestamp:
4/2/2015 11:31:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:lbSaE4mvt/Nq/awZv6EgNssQhRfkzu9vsVSCo3:lbSv4mv3qSEs5Q7fTf

Entry address:
0x75F3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.5472

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
464 KB (475,136 bytes)

Remove Setup.exe - Powered by Reason Core Security