Gridinsoft Logo
File Icon

The RaySetup.exe File Analysis

Technical Analysis

File Name RaySetup.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-27 21:00:15 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
11,033,896
File Size (bytes)
2025-05-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
89b19b8a5e1186ef334a3ca49a50172b
SHA1
b2399f198a7b960d80e5d121b6505df345ffa08c
SHA256
721a572641cb49ae02f87ddbec8f1ffe38e7f8ea0c369cf89590248ae4603f5b
SHA512
8a8a0eb356042c11f7d2c8052821955d45cc989d7102dbe01d95a2a77fe4e07c0b63a5e86a8f28fa028f7c05d7a0a742b85b39245aa4a72ade37c5fe0c2e89dc
ImpHash
69d3f0b35ebfcf45567364c9af0d39c0

PE Analysis

Basic Information

Icon
Hash: 5e172c0dc3b3b45ca039c9e793a07b29
Fuzzy: a0944f9361276e2a5e874864a5c88639
dHash: f8e2eae6b696c6cc
Image Base 0x140000000
Entry Point 0x1401f04e0
Compilation Time 2025-05-27 16:08:29
Checksum 0x00a87a93 (Actual: 0x00a95b2c)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path UpdaterSetup.exe.pdb
Digital Signature OK
Imports 15 libraries
Exports 1 functions
Resources 20 Resources
Sections 12 Sections

Version Information

CompanyName Ray Browser Ltd
FileDescription Ray Installer
FileVersion 135.0.7049.72
InternalName Ray Installer (x64)
LegalCopyright Copyright 2025 Ray Browser Ltd. All rights reserved.
OriginalFilename UpdaterSetup.exe
ProductName Ray Installer
ProductVersion 135.0.7049.72
CompanyShortName Ray Browser Ltd
ProductShortName RayUpdater
LastChange 5b7a6f0e52f52d6e208b23af980005e3a637d310
Official Build 1
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,937,702 bytes 3,937,792 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 65093449B79933918BD6E67D7CB389B8
.rdata 0x003c3000 746,208 bytes 746,496 bytes 6.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 07ED2BF8B7E57BC55CE2D9F570983708
.data 0x0047a000 202,096 bytes 117,760 bytes 2.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CCFB2D5859DD576A6EB76F3A2D21DB28
.pdata 0x004ac000 130,800 bytes 131,072 bytes 6.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E574D8B6E63A9A566650206401825348
.gxfg 0x004cc000 11,712 bytes 11,776 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D93615EA26096CA5079199EB72E5AE0D
.tls 0x004cf000 617 bytes 1,024 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 889F96BEBEEBD4759B5A65F5E35BA754
CPADinfo 0x004d0000 56 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60D3EA61D541C9BE2E845D2787FB9574
LZMADEC 0x004d1000 4,593 bytes 4,608 bytes 6.06 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 05E9EAB8428A551A281AB278073669FA
_RDATA 0x004d3000 500 bytes 512 bytes 4.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4081E8AAB8C44B2E19C300C188297F3B
malloc_h 0x004d4000 195 bytes 512 bytes 3.13 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 22EE3BBCCDBD7160850525D5ED17128A
.rsrc 0x004d5000 6,040,364 bytes 6,040,576 bytes 6.54 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 61CA1153884CFFE21394155300DDDF4D
.reloc 0x00a98000 20,520 bytes 20,992 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 945D20D56B1F47B7D422984237C23AFF
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 20 (6,039,136 bytes)
Resource Type Count Total Size Percentage
B7 1 5,971,734 bytes
98.9%
RT_BITMAP 1 43,240 bytes
0.7%
RT_ICON 6 10,032 bytes
0.2%
RT_DIALOG 1 90 bytes
0%
RT_STRING 8 11,856 bytes
0.2%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 1,116 bytes
0%
RT_MANIFEST 1 978 bytes
0%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware