22d96644f1e29539f3cfa15e716391c95744e03afc3880166699f08702f02b14
Source: Wild
Summary
appsetup.exe is the 67676th most commonly executed Windows program. It typically runs from the path C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64, and is most often launched by tb_free.tmp. It has been observed executing on 0.3% of computers in the wild. The typical filename is appsetup.exe.
EchoTrail Prevalence Score (EPS)
9.74
Rank Analysis
Host Prevalence
0.3%
Execution Rank
67,676th
Behavioral Analysis
Top Filenames
Top Paths
C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64
100.00 %
loading...
Top Network Ports
No results found.
Ancestry Analysis
Top GrandParents
Top Parents
Top Children
Security Analysis
Intel
appsetup.exe could be associated with various programs. The MosaicLoader malware has an appsetup.exe downloaded by a dropper which launches several instances of Powershell to add exclusions from Windows Defender and create registry keys. appsetup.exe can be inspected for what processes it spawns, inspect any scripts it may run, registry keys, and the DLLs that it loads.