Gridinsoft Logo
File Icon

The setup.exe (Windows Startup) File Analysis

Updated 7 days ago
Checked by Malaware Check
setup.exe

Technical Analysis

File Name setup.exe
File Type
Win32 EXE
Magic Bytes PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
SSDEEP Hash
6144:R121dN9429g/bdf0aGduyjwVbM9iX3twXNEkkUCqveZgQJZZA1ArZtkQLkATQmuL:R12bN9ZL67MccBCq2RZ0klLkATHpnQ
Scanner Version 1.0.217.174
Database Version 2025-05-30 22:00:17 UTC
⚠

Suspicious File Detected

Detected by 52 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
75%
Detection Rate
570,368
File Size (bytes)
52/69
Engines Detected
2025-05-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5a10412879f04eb56bae026411ae2038
SHA1
139be4cd9d2a971df56e3e9996ff2b3941aaadd9
SHA256
815c278651a32161d6969db0251ce3d64b8ed4d4b34d6bb870da95be811939a3
SHA512
f0e2e51a5ad484c17eaff3eec93e59b6037bd526f50c3d122c76c065a6a4d884680e5658017742d1f8b4fa95cb7c8cd45321fc52990409e8a3985703c03e3015
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (52 of 69)

DrWeb
Trojan.KeyLogger.26163 Malicious
MicroWorld-eScan
Gen:Variant.Ursu.313218 Malicious
Qihoo-360
Win32/Trojan.Dropper.f1d Malicious
ALYac
Gen:Variant.Ursu.313218 Malicious
Cylance
Unsafe Malicious
VIPRE
Trojan.Win32.Generic!BT Malicious
Sangfor
Malware Malicious
K7AntiVirus
Trojan ( 700000121 ) Malicious
BitDefender
Gen:Variant.Ursu.313218 Malicious
K7GW
Trojan ( 700000121 ) Malicious
CrowdStrike
win/malicious_confidence_100% (W) Malicious
Arcabit
Trojan.Ursu.D4C782 Malicious
Invincea
ML/PE-A + Troj/MSIL-CVN Malicious
BitDefenderTheta
Gen:NN.ZemsilF.34298.Iq0@a8PkT!e Malicious
Symantec
ML.Attribute.HighConfidence Malicious
APEX
Malicious Malicious
Avast
Win32:Malware-gen Malicious
ClamAV
Win.Dropper.Razy-7430372-0 Malicious
Kaspersky
HEUR:Trojan.MSIL.Dnoper.gen Malicious
Alibaba
Trojan:MSIL/Injector.cdfb2809 Malicious
NANO-Antivirus
Trojan.Win32.Agent.dmdgwy Malicious
Ad-Aware
Gen:Variant.Ursu.313218 Malicious
Emsisoft
Gen:Variant.Ursu.313218 (B) Malicious
Comodo
Malware@#2kaenoqo348id Malicious
F-Secure
Heuristic.HEUR/AGEN.1138041 Malicious
Zillya
Trojan.Agent.Win32.499624 Malicious
McAfee-GW-Edition
Artemis!Trojan Malicious
FireEye
Generic.mg.5a10412879f04eb5 Malicious
Sophos
Troj/MSIL-CVN Malicious
SentinelOne
DFI - Malicious PE Malicious
Jiangmin
Trojan/Generic.axhvx Malicious
Webroot
W32.Malware.Gen Malicious
Avira
HEUR/AGEN.1138041 Malicious
Antiy-AVL
Trojan/Win32.Agent Malicious
Microsoft
Trojan:MSIL/Ploprolo.A Malicious
ZoneAlarm
HEUR:Trojan.MSIL.Dnoper.gen Malicious
GData
Gen:Variant.Ursu.313218 Malicious
Cynet
Malicious (score: 90) Malicious
AhnLab-V3
Win-Trojan/FCN.140610.X1385 Malicious
McAfee
Artemis!5A10412879F0 Malicious
MAX
malware (ai score=85) Malicious
VBA32
Trojan.Agent Malicious
Panda
Trj/CI.A Malicious
ESET-NOD32
a variant of MSIL/Injector.HLU Malicious
Rising
Backdoor.Fynloski!8.1FD (TFE:D:vpoGKQQdyuB) Malicious
Yandex
Trojan.Agent!xMKoBuxbHsU Malicious
Ikarus
Trojan.MSIL.Crypt Malicious
eGambit
Unsafe.AI_Score_99% Malicious
Fortinet
W32/Agent.AMKJT!tr Malicious
AVG
Win32:Malware-gen Malicious
Paloalto
generic.ml Malicious
MaxSecure
Trojan.Malware.300983.susgen Malicious
17 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 30adcb5c0b2e3c35eaec2c110733c9f8
Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826
dHash: 92e0b496a6cada72
Image Base 0x00400000
Entry Point 0x0048a9ee
Compilation Time 2015-01-02 19:52:36
Checksum 0x00000000 (Actual: 0x00094a63)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
mscoree
Exports 0 functions
Resources 6 Resources
Sections 4 Sections

Version Information

▼
Comments Start
CompanyName Microsoft Corporation
FileDescription Windows Startup
FileVersion 9.11.0.2
InternalName adjjop.exe
LegalCopyright Copyright © Microsoft 2014
OriginalFilename start.exe
ProductName Startup
ProductVersion 9.11.0.2
Assembly Version 9.11.0.2
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 559,604 bytes 559,616 bytes 7.54 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6496E5D32868CEBBDDAF88E1CE0B63FC
.sdata 0x0008c000 2,580 bytes 3,072 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F0488B97E342AAD01C16EC14FBCFEC9B
.rsrc 0x0008e000 5,928 bytes 6,144 bytes 4.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BA319ABA358198376B061E9AD458BD6F
.reloc 0x00090000 12 bytes 512 bytes 0.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 9AE75BEDFA62BB5B5BD91E8226C50E80
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 6 (5,530 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 4,640 bytes
83.9%
RT_GROUP_ICON 1 62 bytes
1.1%
RT_VERSION 1 828 bytes
15%

Certificate Chain Analysis

▼
Certificate Information
Product Startup
Description Windows Startup
File Version 9.11.0.2
Original Name start.exe
Internal Name adjjop.exe
Copyright Copyright © Microsoft 2014

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
52 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware