Gridinsoft Logo
File Icon

The PAVSetup.exe File Analysis

Updated 2 days ago
Checked by Malware Check
PAVSetup.exe

Technical Analysis

File Name PAVSetup.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
1572864:RZBamWIu+Zj6Du2n0uoYCrU+4/GqEjxkVgGDQjP1YO2deXgyfEEtg/iGbxajigia:rBasTU0QGU+5jxDcQR6AXzsOGodixY
Scanner Version 1.0.222.174
Database Version 2025-08-02 06:00:21 UTC
⚠

Suspicious File Detected

Detected by 30 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
43%
Detection Rate
85,294,704
File Size (bytes)
30/69
Engines Detected
2025-08-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
521dad4d9da420989c8a5487c4c2691a
SHA1
4b2fb2a07d444ec8f84a8c9ab4da8d92c78eedd7
SHA256
d411d71ae66f71d6249d91e311aeccd4d211a0b63b58aab183994ce3d3274ec3
SHA512
9a837d0fa1b94079fff76d1f27941e91153154a70ac0b6ef1d2ea7d54a0bbec77b8c46071117b1919f2e03fe0db51497201eeb403d35cb0bcd72986845cf45d5
ImpHash
fcf1390e9ce472c7270447fc5c61a0c1

Security Engines with Detections (30 of 69)

Lionic
Trojan.Win32.SecuraShield.4!c Malicious
MicroWorld-eScan
Application.Agent.KGM Malicious
CTX
exe.trojan.securashield Malicious
Skyhigh
Artemis Malicious
ALYac
Application.Agent.KGM Malicious
VirIT
Deceptor.ProtegentAV.DLC Malicious
Paloalto
generic.ml Malicious
Symantec
PUA.Superfluss Malicious
ESET-NOD32
a variant of Win32/SecuraShield.B potentially unwanted Malicious
Avast
Win32:Malware-gen Malicious
BitDefender
Application.Agent.KGM Malicious
NANO-Antivirus
Riskware.Raw.Dwn.cvxhzw Malicious
Sophos
Mal/Generic-S Malicious
F-Secure
PotentialRisk.PUA/SecuraShield.A Malicious
DrWeb
Trojan.Hottrend.1 Malicious
VIPRE
Application.Agent.KGM Malicious
McAfeeD
ti!D411D71AE66F Malicious
Emsisoft
Application.Agent.KGM (B) Malicious
Ikarus
PUA.SecuraShield Malicious
Google
Detected Malicious
Avira
PUA/SecuraShield.A Malicious
Arcabit
Application.Agent.KGM Malicious
GData
Application.Agent.KGM Malicious
Varist
W32/ABDeceptor.FPND-9247 Malicious
VBA32
Backdoor.MSIL.Bladabindi Malicious
Panda
PUP/ProtegentAV Malicious
MaxSecure
Trojan.Malware.328990230.susgen Malicious
AVG
Win32:Malware-gen Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Miner:Win/Agent!JQ.AVU Malicious
39 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 8d9da329386d64d6b86a12bd2f986399
Fuzzy: 9043363bfee17e0d508057b9ae7189e9
dHash: 84b4b4d4c4ccccc0
Image Base 0x00400000
Entry Point 0x0041e239
Compilation Time 2019-12-05 07:37:23
Checksum 0x0515be82 (Actual: 0x0515be82)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
Digital Signature OK
Imports 2 libraries
KERNEL32, gdiplus
Exports 0 functions
Resources 27 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 198,159 bytes 198,656 bytes 6.69 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5C34491FEE255555D49145E7743274FB
.rdata 0x00032000 41,986 bytes 42,496 bytes 5.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 46BA011F50AD8D65A6B8D983B050AC7F
.data 0x0003d000 145,584 bytes 4,608 bytes 3.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CE7EE73DF4E6A3A0F245A2D8FA63B9DF
.gfids 0x00061000 232 bytes 512 bytes 2.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 79C1564768C1621D256D8D36E32E89FA
.rsrc 0x00062000 57,296 bytes 57,344 bytes 6.64 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8E29476AB61853F6591B2CD8A3D727BF
.reloc 0x00070000 8,492 bytes 8,704 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3E4166C697FACADAC24F07E8B3E0774B
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 27 (55,604 bytes)
Resource Type Count Total Size Percentage
PNG 2 8,430 bytes
15.2%
RT_ICON 7 38,113 bytes
68.5%
RT_DIALOG 6 2,916 bytes
5.2%
RT_STRING 10 4,166 bytes
7.5%
RT_GROUP_ICON 1 104 bytes
0.2%
RT_MANIFEST 1 1,875 bytes
3.4%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 06:22 AM 12/29/2020 (1679 days ago)
Verification Status Signed
Signers Unistal Systems Pvt. Ltd.; thawte SHA256 Code Signing CA; thawte
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
thawte SHA256 Code Signing CA #2 Chain
Validity Period: 2013-12-10 00:00:00 → 2023-12-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 71 A0 B7 36 95 DD B1 AF C2 3B 2B 9A 18 EE 54 CB
Symantec Time Stamping Services Signer - G4 #3 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Unistal Systems Pvt. Ltd. #4 Chain
Validity Period: 2019-11-12 00:00:00 → 2021-11-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 3D 6A D6 FB 5E 7C 14 90 C3 CF AA 25 B7 DD 4C DE

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
30 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware