The Setup exe (Newfts) iTop Inc File Malware Analysis
Gridinsoft Logo
File Icon

The Setup.exe (Newfts) File Analysis

Updated 1 month ago
Checked by Malware Check
Setup.exe

Technical Analysis

File Name Setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-27 00:00:29 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
2,242,256
File Size (bytes)
2025-11-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
db7e67835fce6cf9889f0f68ca9c29a9
SHA1
5565afda37006a66f0e4546105be60bbe7970616
SHA256
dbd3057a58fd3407c95418bc5d9c253adc8c658ee338f22d58374ed3ea37b738
SHA512
bc2714bb408715e5e1cec1337b831e26dbda208183955a07ec8653a38c9c0f25f60f333a154b738927ce085e7bbff438963b941a6c2773b3e7325cd900e7651b
ImpHash
d72076b64b758e72e530c9d242e9fe4f

PE Analysis

Basic Information

▼
Icon
Hash: eec0171701ea308c8655dd4c833bcb59
Fuzzy: 85f0ddb1803e03e7bfb576cc8c72c973
dHash: f6c9d4f6caceccea
Image Base 0x00400000
Entry Point 0x00570f14
Compilation Time 2024-06-11 05:58:41
Checksum 0x0022cc0a (Actual: 0x0022cc0a)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 10 libraries
oleaut32, advapi32, user32, kernel32, msimg32, gdi32, version, ole32, comctl32, shell32
Exports 0 functions
Resources 72 Resources
Sections 9 Sections

Version Information

▼
CompanyName iTop Inc.
FileDescription Newfts
FileVersion 1.0.0.164
InternalName
LegalCopyright © iTop Inc. All rights reserved.
LegalTrademarks iTop Inc.
OriginalFilename Newfts.exe
ProductName iTop Data Recovery
ProductVersion 3.4.0
Comments
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,496,012 bytes 1,496,064 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0CE878D0CC2CD800DC7C08465A7799A9
.itext 0x0016f000 8,060 bytes 8,192 bytes 6.07 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 29AFB26183C8C27D99A38F190CF69B90
.data 0x00171000 74,108 bytes 74,240 bytes 5.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B04C8F3187D2CDF3C9F627EAFE9AA1F3
.bss 0x00184000 288,844 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x001cb000 13,416 bytes 13,824 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D9D147804F91C236E4173CD73222ECE7
.tls 0x001cf000 72 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x001d0000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 20DBE8273594649712E68F55673B3E0D
.reloc 0x001d1000 97,676 bytes 97,792 bytes 6.65 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 38E248087E0CBAEB5FE6FF76593C5F51
.rsrc 0x001e9000 524,288 bytes 524,288 bytes 7.14 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 75C60CF3688F1933A2D48D177D01442F
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 72 (519,945 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 7 2,156 bytes
0.4%
RT_BITMAP 10 4,660 bytes
0.9%
RT_ICON 13 210,923 bytes
40.6%
RT_STRING 28 23,884 bytes
4.6%
RT_RCDATA 4 276,352 bytes
53.2%
RT_GROUP_CURSOR 7 140 bytes
0%
RT_GROUP_ICON 1 188 bytes
0%
RT_VERSION 1 792 bytes
0.2%
RT_MANIFEST 1 850 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product iTop Data Recovery
Description Newfts
File Version 1.0.0.164
Original Name Newfts.exe
Signing Date 09:35 AM 06/11/2024 (576 days ago)
Verification Status Signed
Signers ORANGE VIEW LIMITED; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright © iTop Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-01-13 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F D1 BB CA 79 6B D7 F8 DD 4C 82 E1 0A 9A 96 31
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
ORANGE VIEW LIMITED #4 Chain
Validity Period: 2023-10-25 00:00:00 → 2026-10-26 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 24 91 11 11 5A EF 70 A2 80 0B AA 92 17 EF 6D
DigiCert Timestamp 2023 #5 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #6 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #7 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware