Gridinsoft Logo
File Icon

The Setup.exe (Python) File Analysis

Updated 2 hours ago
Checked by Malware Check
Setup.exe

Technical Analysis

File Name Setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.250.174
Database Version 2026-07-09 22:00:14 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
96,272
File Size (bytes)
2026-07-09
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
eba77a34e9b8aa78fce520d1431fc68b
SHA1
215105e2640cd6da8adc1ea9ddafeb08c4d50f9b
SHA256
8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
SHA512
fa66a42dd71fc862c218777b572f143144a7de0c5d8630061a554e6ebb9ad4557d810e7ca75598254231cb41dec2391c49a362206b8275742b5a5b92ee33417f
ImpHash
d5a9e56a76478696cabdca1ac70dc402

PE Analysis

Basic Information

▼
Icon
Hash: 19208c2124fc1039e4bcbd9de8c46f1e
Fuzzy: 5bcfcb072d3ea52ab281b3933d92208a
dHash: 928892ba3e2ce4c0
Image Base 0x00400000
Entry Point 0x00401299
Compilation Time 2020-03-10 09:45:42
Checksum 0x000230b0 (Actual: 0x000230b0)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\A\18\s\PCbuild\win32\pythonw.pdb
Digital Signature OK
Imports 8 libraries
python37, VCRUNTIME140, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-heap-l1-1-0, KERNEL32
Exports 0 functions
Resources 15 Resources
Sections 6 Sections

Version Information

▼
CompanyName Python Software Foundation
FileDescription Python
FileVersion 3.7.7
InternalName Python Application
LegalCopyright Copyright © 2001-2016 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.
OriginalFilename pythonw.exe
ProductName Python
ProductVersion 3.7.7
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,216 bytes 4,608 bytes 5.89 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9368CBDF44B8D4EE4369E0D24CB39B12
.rdata 0x00003000 2,816 bytes 3,072 bytes 4.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A9A00C1BA2485080036DFEF8DD1F4247
.data 0x00004000 900 bytes 512 bytes 0.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 550B6D19EEFD3A6F89A89A9BE78FDBAF
.gfids 0x00005000 36 bytes 512 bytes 0.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6452981AC31DD4560D40DB77FFCB7C7F
.rsrc 0x00006000 79,216 bytes 79,360 bytes 6.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AB5053AA92890BC19488FB2CFFAFE53C
.reloc 0x0001a000 492 bytes 512 bytes 6.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B095553F24740520CF590F4B24B438CB

Resource Analysis

▼
Total Resources: 15 (78,371 bytes)
Resource Type Count Total Size Percentage
RT_ICON 12 75,904 bytes
96.9%
RT_GROUP_ICON 1 174 bytes
0.2%
RT_VERSION 1 944 bytes
1.2%
RT_MANIFEST 1 1,349 bytes
1.7%

Certificate Chain Analysis

▼
Certificate Information
Product Python
Description Python
File Version 3.7.7
Original Name pythonw.exe
Signing Date 09:45 AM 03/10/2020 (2312 days ago)
Verification Status Signed
Signers Python Software Foundation; DigiCert SHA2 Assured ID Code Signing CA; DigiCert
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Internal Name Python Application
Copyright Copyright © 2001-2016 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
DigiCert SHA2 Assured ID Code Signing CA #3 Chain
Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
Python Software Foundation #4 Chain
Validity Period: 2018-12-18 00:00:00 → 2021-12-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 03 3E D5 ED A0 65 D1 B8 C9 1D FC F9 2A 6C 9B D8

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware