Gridinsoft Logo
File Icon

The CSISSetup.exe (McAfee CSIS Installer) File Analysis

Updated 2 months ago
Checked by Malware Check
CSISSetup.exe

Technical Analysis

File Name CSISSetup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.228.174
Database Version 2025-10-30 22:00:21 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
85,359,560
File Size (bytes)
2025-10-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e5bd55823fde2adabc51fde918bd0cce
SHA1
872830bca18aeb947247f5d9aaf97975ebad3cd3
SHA256
e9bdc8dc200f7335a35e39fe35ac07ac23a3092c0209178683e6c3f41fe0bcb4
SHA512
36764a9e51bce441389dd50310200c179f493c5171c41e4a3cd03766c18e1ce15819d40be5dac3b589076627ded5a875e0fdb5646d0948741b3d43c3bc646e56
ImpHash
56f63993e32a94355ab86711291f5cad

PE Analysis

Basic Information

▼
Icon
Hash: ed88e6206db442e368e6a3ad6cdf2690
Fuzzy: 1d341ad9466077550d1508f61d535fa5
dHash: 8e8eb296868eccf0
Image Base 0x00400000
Entry Point 0x0041f630
Compilation Time 2023-03-08 00:56:29
Checksum 0x0516913d (Actual: 0x0516913d)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path E:\B\T\fd302df5-3917-4497-a31a-97e505718bae\build\Win32\Release\CSISSetup.pdb
Digital Signature OK
Imports 6 libraries
WINTRUST, CRYPT32, KERNEL32, ole32, OLEAUT32, SHLWAPI
Exports 0 functions
Resources 18 Resources
Sections 6 Sections

Version Information

▼
CompanyName McAfee, LLC
FileDescription McAfee CSIS Installer
FileVersion 21.1.157.0
InternalName CSISSetup
LegalCopyright Copyright © 2023 McAfee, LLC
OriginalFilename CSISSetup.exe
ProductName McAfee Consumer Software Installation System
ProductVersion 21.1.0.0
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 331,850 bytes 332,288 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E5E32CEB86CD579919615BA30A5D5431
.rdata 0x00053000 106,132 bytes 106,496 bytes 5.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1DDDD2A9C2811FD12B422149375D4B95
.data 0x0006d000 12,088 bytes 8,192 bytes 4.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E2F06C81C51E33B7A07AE70192DA1F27
.didat 0x00070000 168 bytes 512 bytes 1.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 27AE678E1C3CB1DC238A39E7E0A64390
.rsrc 0x00071000 83,396,268 bytes 83,396,608 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 91DB2508AF9E471C1046BAF07182124D
.reloc 0x04ffa000 17,664 bytes 17,920 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ FD2731FA613E07730BBC68B1D1442BBA
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 18 (83,395,135 bytes)
Resource Type Count Total Size Percentage
FILE 4 83,292,966 bytes
99.9%
RT_ICON 11 99,710 bytes
0.1%
RT_GROUP_ICON 1 160 bytes
0%
RT_VERSION 1 812 bytes
0%
RT_MANIFEST 1 1,487 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product McAfee Consumer Software Installation System
Description McAfee CSIS Installer
File Version 21.1.157.0
Original Name CSISSetup.exe
Signing Date 01:16 AM 03/08/2023 (1039 days ago)
Verification Status Signed
Signers McAfee, LLC; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name CSISSetup
Copyright Copyright © 2023 McAfee, LLC
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
McAfee, LLC #2 Chain
Validity Period: 2021-10-04 17:33:39 → 2024-10-04 17:33:39
Signature Algorithm: sha256RSA
Serial Number: 7D 9E 98 88 D0 F9 7A 54 32 82 7A 5E
DigiCert Timestamp 2022 - 2 #3 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
McAfee, LLC #6 Chain
Validity Period: 2021-03-12 00:00:00 → 2024-03-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 13 A1 91 C0 EB 27 AE 85 EA 99 D7 29 14 B6 91 E4
McAfee Code Signing CA 2 #7 Chain
Validity Period: 2014-10-27 00:00:00 → 2024-10-26 23:59:59
Signature Algorithm: sha384RSA
Serial Number: CA C1 F1 DD 01 7E 80 F1 2B 4D 17 C1 69 6D 9B A5
USERTrust RSA Certification Authority #8 Chain
Validity Period: 2015-07-22 21:03:49 → 2025-07-22 21:03:49
Signature Algorithm: sha1RSA
Serial Number: 33 00 00 00 44 B7 3F FC EF 5A CF A2 7A 00 00 00 00 00 44

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware