Gridinsoft Logo
File Icon

The Setup.exe (Setup) File Analysis

Updated 1 day ago
Checked by Malware Check
Setup.exe

Technical Analysis

File Name Setup.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
SSDEEP Hash
12288:eT/ok/dM9jnhDZMSwkH3BJaDZrq5W0jRrvcvroFa9txGHysgXhghQKJX5huK1rXP:ejoa4hDqSwkH3rFJgnQgXhghHhuK1TP
Scanner Version 1.0.218.174
Database Version 2025-06-17 10:00:28 UTC
⚠

Suspicious File Detected

Detected by 34 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
49%
Detection Rate
1,386,400
File Size (bytes)
34/69
Engines Detected
2025-06-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c0e56f56d0b99c224620caa398697e39
SHA1
4a951381333199382341db5de09c795ca84b6e5b
SHA256
2d87c21cde6ac62cf52a5e5f52a4811abf9d1929c02afe1a52d3d96214e3060e
SHA512
302659f56ec2a745170430c830d5b7fa82bf5856422d1717885fe372863d48e16d0646100070d86665a2591e763a31d43f897cea200f36a72e7d20d87ef1211b
ImpHash
c7269d59926fa4252270f407e4dab043

Security Engines with Detections (34 of 69)

Elastic
malicious (high confidence) Malicious
Skyhigh
Artemis!Trojan Malicious
Malwarebytes
Malware.AI.147548130 Malicious
Sangfor
Trojan.Win32.Save.a Malicious
Alibaba
Trojan:Win64/Kryptik.11d986bc Malicious
K7GW
Trojan ( 005c573e1 ) Malicious
CrowdStrike
win/malicious_confidence_70% (W) Malicious
huorong
Trojan/ShellLoader.av Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of WinGo/Kryptik.GM Malicious
APEX
Malicious Malicious
TrendMicro-HouseCall
TrojanSpy.Win64.ACRSTEALER.YXFFPZ Malicious
Paloalto
generic.ml Malicious
Cynet
Malicious (score: 99) Malicious
Kaspersky
Trojan.Win64.GoInj.ct Malicious
Avast
Win64:Evo-gen [Trj] Malicious
F-Secure
Trojan.TR/Redcap.ibhdk Malicious
TrendMicro
TrojanSpy.Win64.ACRSTEALER.YXFFPZ Malicious
McAfeeD
ti!2D87C21CDE6A Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.WinGo.Rozena Malicious
GData
Win64.Trojan.Agent.W8XKUY Malicious
Google
Detected Malicious
Avira
TR/Redcap.ibhdk Malicious
Kingsoft
Win64.Trojan.GoInj.gen Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
AhnLab-V3
Infostealer/Win.ACRStealer.R709825 Malicious
Cylance
Unsafe Malicious
Rising
Trojan.ShellLoader!8.1B9F4 (CLOUD) Malicious
TrellixENS
Artemis!C0E56F56D0B9 Malicious
Fortinet
W32/Kryptik.GM!tr Malicious
AVG
Win64:Evo-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Trojan:Multi/Wacatac.B9nj Malicious
35 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: a599169279103107c3c311fc5dfd6530
Fuzzy: 3b5d3c7d207e37dceeedd301e35e2e58
dHash: e8969617179696e8
Image Base 0x00400000
Entry Point 0x0045c4a0
Compilation Time 1970-01-01 00:00:00
Checksum 0x001571df (Actual: 0x001571df)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 1 libraries
kernel32
Exports 0 functions
Resources 28 Resources
Sections 7 Sections

Version Information

▼
Comments Privacy Policy: http://www.logicool.co.jp/privacy
CompanyName $Co_Name Inc.
FileDescription Setup
FileVersion 2.52.33
LegalCopyright Copyright 2005-2022 Logitech. All Rights Reserved
LegalTrademarks Logitechs trademarks are either registered trademarks or trademarks of Logitech in the US and/or other countries.
ProductName Unifying Software Setup
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 537,271 bytes 537,600 bytes 6.17 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 097450A57C6172721D0BF920BEEEBDDE
.rdata 0x00085000 686,792 bytes 687,104 bytes 5.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FB44CA9A9E70A055D29B4B781F79D8C2
.data 0x0012d000 450,464 bytes 80,896 bytes 3.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 56553F3E0D78604FD02F0F46280590C0
.idata 0x0019b000 1,164 bytes 1,536 bytes 3.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 14BDB902184071E1FECB55D940FF8CC1
.reloc 0x0019c000 25,512 bytes 25,600 bytes 5.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2E3835D4CF3E8EB74CF149FBFF518891
.symtab 0x001a3000 4 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07B5472D347D42780469FB2654B7FC54
.rsrc 0x001a4000 44,148 bytes 44,544 bytes 3.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E3DCBFE5475FFD478F032020DA8B5BAC

Resource Analysis

▼
Total Resources: 28 (42,648 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 34,408 bytes
80.7%
RT_DIALOG 20 5,964 bytes
14%
RT_GROUP_ICON 1 76 bytes
0.2%
RT_VERSION 1 992 bytes
2.3%
RT_MANIFEST 1 1,208 bytes
2.8%

Certificate Chain Analysis

▼
Certificate Information
Product Unifying Software Setup
Description Setup
File Version 2.52.33
Signing Date 09:42 AM 03/28/2022 (1178 days ago)
Verification Status The digital signature of the object did not verify.
Signers Logitech Inc; DigiCert EV Code Signing CA (SHA2); DigiCert
Counter Signers DigiCert Timestamp 2021; DigiCert SHA2 Assured ID Timestamping CA; DigiCert
Copyright Copyright 2005-2022 Logitech. All Rights Reserved
Certificate Chain Summary
DigiCert Timestamp 2021 #1 Primary
Validity Period: 2021-01-01 00:00:00 → 2031-01-06 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 0D 42 4A E0 BE 3A 88 FF 60 40 21 CE 14 00 F0 DD
DigiCert SHA2 Assured ID Timestamping CA #2 Chain
Validity Period: 2016-01-07 12:00:00 → 2031-01-07 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 0A A1 25 D6 D6 32 1B 7E 41 E4 05 DA 36 97 C2 15
Logitech Inc #3 Chain
Validity Period: 2020-06-29 00:00:00 → 2022-07-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 08 FC 2A 6C 41 1D 88 E7 25 3C 3D 99 17 0E AE 62
DigiCert EV Code Signing CA (SHA2) #4 Chain
Validity Period: 2012-04-18 12:00:00 → 2027-04-18 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 03 F1 B4 E1 5F 3A 82 F1 14 96 78 B3 D7 D8 47 5C

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
34 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware