Gridinsoft Logo
File Icon

The Setup.exe (Setup.exe) File Analysis

Updated 2 months ago
Checked by Malaware Check
Setup.exe

Technical Analysis

File Name Setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-08 20:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
2,900,440
File Size (bytes)
2025-03-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e1870c1441266653f21c033620e0f019
SHA1
8f948161b065fa22fc03a385fdbaa03b87d94cb2
SHA256
4f39f89601641377777cca09e00f803ab2c19f117cff11c95c0d0cc507daea11
SHA512
2f10b0fdd4c2e561d3680c7a7127b0caaf99fff3a99108d34fc1bb77a3174ba2f9568a2b022badb7950028550f2c4d40c97fe1b917ddd564149a786e43906344
ImpHash
e5696bd7e143a24301a930ebe94b6f76

PE Analysis

Basic Information

▼
Icon
Hash: bc2d71aa9170beee008e234ac9392227
Fuzzy: c52cf0796ae60bfeb7d78312fc1302c2
dHash: 68c4c0e0f071b2b4
Image Base 0x00400000
Entry Point 0x0055c1b7
Compilation Time 2017-01-10 22:22:59
Checksum 0x002d3559 (Actual: 0x002d3559)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path e:\usr\VideoStudioX10\p4\BuildProjects\Setups\Products\VideoStudio\SetupEngine2.0\Release\Setup.pdb
Digital Signature OK
Imports 21 libraries
Exports 0 functions
Resources 127 Resources
Sections 5 Sections

Version Information

▼
CompanyName Corel Corporation
FileDescription Setup.exe
FileVersion 2.0.0.002
InternalName Setup.exe
LegalCopyright Copyright (C) 2008 Corel Corporation. All rights reserved.
OriginalFilename Setup.exe
ProductName Setup.exe
ProductVersion 2.0.0.002
Revision 127
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,615,364 bytes 1,615,872 bytes 6.56 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E78A07FE001DAEB01B639C35E305D861
.rdata 0x0018c000 386,184 bytes 386,560 bytes 4.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 534408FC3CEE2D57318E61CC903E6421
.data 0x001eb000 71,536 bytes 32,768 bytes 4.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1A059B0465747B843B36F77EF05910FD
.rsrc 0x001fd000 434,824 bytes 435,200 bytes 3.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8D68E999A554C6A9FA21D1197C314B1F
.reloc 0x00268000 422,520 bytes 422,912 bytes 3.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2212DAB39409FC18160047CFBD67EB52
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 127 (429,229 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 16 4,800 bytes
1.1%
RT_BITMAP 6 4,412 bytes
1%
RT_ICON 15 394,504 bytes
91.9%
RT_DIALOG 6 1,230 bytes
0.3%
RT_STRING 65 21,862 bytes
5.1%
RT_GROUP_CURSOR 15 314 bytes
0.1%
RT_GROUP_ICON 1 216 bytes
0.1%
RT_VERSION 1 808 bytes
0.2%
RT_HTML 1 73 bytes
0%
RT_MANIFEST 1 1,010 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product Setup.exe
Description Setup.exe
File Version 2.0.0.002
Original Name Setup.exe
Signing Date 12:23 AM 1/11/2017 (3068 days ago)
Verification Status Signed
Signers Corel Corporation; Symantec Class 3 SHA256 Code Signing CA; VeriSign
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Internal Name Setup.exe
Copyright Copyright (C) 2008 Corel Corporation. All rights reserved.
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 12:00 AM 12/21/2012 → 11:59 PM 12/30/2020
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 12:00 AM 10/18/2012 → 11:59 PM 12/29/2020
Signature Algorithm: sha1RSA
Serial Number: EC FF 43 8C 8F EB F3 56 E0 4D 86 A9 81 B1 A5 0
Corel Corporation #3 Chain
Validity Period: 12:00 AM 4/19/2016 → 11:59 PM 5/22/2019
Signature Algorithm: sha256RSA
Serial Number: 24 A1 BD 17 60 51 FF 86 4D 01 88 12 F9 F2 30 4C
Symantec Class 3 SHA256 Code Signing CA #4 Chain
Validity Period: 12:00 AM 12/10/2013 → 11:59 PM 12/9/2023
Signature Algorithm: sha256RSA
Serial Number: 3D 78 D7 F9 76 49 60 B2 61 7D F4 F0 1E CA 86 2A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware