Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

launcher.exe (Trend Micro DirectPass by Trend Micro)

Child process

installworkspace.exe (Trend Micro DirectPass by Trend Micro)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueW, RegOpenKeyW, MakeSelfRelativeSD, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, CopySid, GetSecurityDescriptorOwner, GetAclInformation, MakeAbsoluteSD, IsValidSid, GetSecurityDescriptorControl, GetLengthSid, RegQueryValueExW, RegFlushKey, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegEnumValueW, RegEnumKeyExW, RegDeleteValueW, RegDeleteKeyW, RegSetValueExW, GetSidSubAuthorityCount, GetTokenInformation, AddAce, InitializeSecurityDescriptor, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, InitializeAcl, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, GetSecurityDescriptorLength, RegEnumKeyW

comctl32.dll

InitCommonControlsEx

gdi32.dll

GetStockObject, DeleteDC, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SelectObject, Escape, ExtTextOutW, TextOutW, RectVisible, PtVisible, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, CreateBitmap, ScaleWindowExtEx, GetDeviceCaps, SetWindowExtEx

kernel32.dll

DllMain

ole32.dll

CoCreateGuid, CoTaskMemFree, StringFromCLSID

shlwapi.dll

PathFindExtensionW, PathFindFileNameW, PathFindFileNameA

urlmon.dll

URLDownloadToFileA

user32.dll

DestroyMenu, UnregisterClassW, ShowWindow, RegisterWindowMessageW, LoadIconW, WinHelpW, GetCapture, GetClassLongW, SetPropW, GetPropW, RemovePropW, IsWindow, GetForegroundWindow, GetDlgItem, GetTopWindow, DestroyWindow, GetMessageTime, GetMessagePos, MapWindowPoints, SetForegroundWindow, GetClientRect, GetMenu, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, AdjustWindowRectEx, CopyRect, DefWindowProcW, UnregisterClassA, SetWindowLongW, SetWindowPos, SystemParametersInfoA, IsIconic, GetWindowPlacement, GetWindow, GetDlgCtrlID, GetWindowRect, GetClassNameW, PtInRect, SetWindowTextW, ClientToScreen, GrayStringW, DrawTextExW, DrawTextW, TabbedTextOutW, GetWindowTextW, UnhookWindowsHookEx, LoadCursorW, GetSystemMetrics, GetDC, ReleaseDC, GetSysColor, GetSysColorBrush, GetWindowLongW, GetLastActivePopup, IsWindowEnabled, EnableWindow, SetCursor, SetWindowsHookExW, CallNextHookEx, GetMessageW, IsWindowVisible, GetKeyState, GetCursorPos, ValidateRect, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, LoadBitmapW, GetFocus, GetParent, ModifyMenuW, EnableMenuItem, CheckMenuItem, PostQuitMessage, GetMenuState, GetMenuItemID, GetMenuItemCount, GetSubMenu, TranslateMessage, PeekMessageW, MsgWaitForMultipleObjects, DispatchMessageW, SendMessageW, FindWindowW, MessageBoxW, PostMessageW, GetWindowThreadProcessId, ExitWindowsEx, GetActiveWindow, CallWindowProcW

winhttp.dll

WinHttpSendRequest, WinHttpOpen, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpSetOption, WinHttpOpenRequest, WinHttpConnect, WinHttpCrackUrl, WinHttpCloseHandle, WinHttpGetProxyForUrl, WinHttpGetIEProxyConfigForCurrentUser

winspool.drv

OpenPrinterW, DocumentPropertiesW, ClosePrinter

ws2_32.dll

freeaddrinfo, getaddrinfo, getnameinfo

Setup.exe

Trend Micro DirectPass by Trend Micro (Signed)

Remove Setup.exe

Version:	1.2.0.2048
MD5:	5db0c020a7eee4f92f0308b30cb7364f
SHA1:	d1bfa8565cbacee3daa9eff43b5bcb2fcc287d02
SHA256:	4a65f074f4f751efc5e3453ce96b9d6ef289125a63eebbf9fed2b0eed1a5aa08

What is Setup.exe?

Trend Micro DirectPass Setup Launcher is part of Trend Micro security framework, an antivirus platform with Smart Protection Network, a cloud-client content security infrastructure designed to protect customers from web threats, such as data stealing malware. This combines in-the-cloud technologies with other client-based AV technologies to reduce dependency on conventional pattern file downloads on the endpoint.

About Setup.exe (from Trend Micro)

“Trend Micro DirectPass manages website passwords and login IDs in one secure location, so you only need to remember one password. Trend Micro DirectPass helps you securely manage and sync your passwor”

Details

File name:	setup.exe
Publisher:	Trend Micro Inc.
Product name:	Trend Micro DirectPass
Description:	Trend Micro DirectPass Setup Launcher
Typical file path:	C:\users\user\appdata\roaming\opencandy\981fecd9663c44d7a9ba6c8a4e4c3abb\trendmicro_dp_mui_download\package\setup.exe
File version:	1.2.0.2048
Product version:	1.2
Size:	885.52 KB (906,768 bytes)
Certificate
Issued to:	Trend Micro
Authority (CA):	VeriSign
Effective date:	Monday, December 26, 2011
Expiration date:	Friday, February 15, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.03034464%	0.028634%
Kernel CPU:	0.02360139%	0.013761%
User CPU:	0.00674325%	0.014873%
Kernel CPU time:	280 ms/min	100,923,805ms/min
Memory
Private memory:	3.77 MB	21.59 MB
Private (maximum):	2.45 MB
Private (minimum):	1.99 MB
Non-paged memory:	3.77 MB	21.59 MB
Virtual memory:	76.13 MB	140.96 MB
Virtual memory (peak):	84.14 MB	169.69 MB
Working set:	1.99 MB	18.61 MB
Working set (peak):	9.49 MB	37.95 MB
Resource allocations
Threads:	9	12
Handles:	160	600
GUI GDI count:	9	103
GUI GDI peak:	11	142
GUI USER count:	6	49
GUI USER peak:	9	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	C:\users\user\appdata\roaming\opencandy\981fecd9663c44d7a9ba6c8a4e4c3abb\trendmicro_dp_mui_download\package\setup.exe
Owner:	User
Parent process:	launcher.exe (Trend Micro DirectPass by Trend Micro)

Threads