The SetupME exe (Intel(R) Management Engine Components installer) Intel Corporation File Malware Analysis
Gridinsoft Logo
File Icon

The SetupME.exe (Intel(R) Management Engine Components installer) File Analysis

Updated 6 months ago
Checked by Malware Check
SetupME.exe

Technical Analysis

File Name SetupME.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-27 10:00:19 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
87,543,232
File Size (bytes)
2025-05-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
50c43b3c916f8205e1d1dffe5b0563c0
SHA1
0b4ea9fe09fb6aea250ace6382c424174923e42c
SHA256
efcd391eb6efc91cb677bd9fcd67e0b47d0abb23a42ec495f4fe7ba53a01b6f7
SHA512
caa896fdf2a627a910c66610fb24501bc72a28c3ce3e326d1a58adf9854827571a641fed2d09fadebf0eb4d2d8a1031702b603600508ad1f2296e0dfe4dbbfd5
ImpHash
5275cb1df2b4bd3aac3ad8c9723a85ae

PE Analysis

Basic Information

▼
Icon
Hash: e5d8ce65bec65ddd762fdb16c77c239f
Fuzzy: a9a460bc96a453405df198555a9508e5
dHash: 8070f1797cecfc00
Image Base 0x00400000
Entry Point 0x0043341d
Compilation Time 2019-02-27 10:46:50
Checksum 0x0538c1f9 (Actual: 0x0538c1f9)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\buildagent_prod_8811\p4\1598850468\Installer_WS\AMT\Release\Setup.pdb
Digital Signature OK
Imports 9 libraries
KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, SHLWAPI, SETUPAPI
Exports 0 functions
Resources 37 Resources
Sections 5 Sections

Version Information

▼
CompanyName Intel Corporation
FileDescription Intel(R) Management Engine Components installer
FileVersion 12, 0, 2709, 10
InternalName ME
LegalCopyright Copyright (C), Intel Corporation. All rights reserved.
LegalTrademarks Intel Corporation
OriginalFilename Setup.exe
ProductName Intel(R) Management Engine Components
ProductVersion 1909.12.0.1236
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 335,921 bytes 336,384 bytes 6.55 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8A2A6112FAF300908E983D52305C65C2
.rdata 0x00054000 118,448 bytes 118,784 bytes 4.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 135B4BB89E9189E5720892424984D3C3
.data 0x00071000 12,584 bytes 5,120 bytes 3.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DFC6927F091F201B3278A08B02C0FBDF
.rsrc 0x00075000 87,050,932 bytes 87,051,264 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EA2D44B5B5BB749E3300E8118F28A789
.reloc 0x0537a000 19,400 bytes 19,456 bytes 6.68 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 90A902D01D04BB6868C56D1D72902FB5
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 37 (87,048,924 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 7 177,144 bytes
0.2%
RT_ICON 9 203,493 bytes
0.2%
RT_DIALOG 13 2,626 bytes
0%
RT_RCDATA 5 86,663,374 bytes
99.6%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 1,000 bytes
0%
RT_MANIFEST 1 1,155 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product Intel(R) Management Engine Components
Description Intel(R) Management Engine Components installer
File Version 12, 0, 2709, 10
Original Name Setup.exe
Signing Date 12:01 PM 2/27/2019 (2482 days ago)
Verification Status Signed
Signers Intel(R) Embedded Subsystems and IP Blocks Group; Intel External Issuing CA 7B; Sectigo (formerly Comodo CA)
Counter Signers timestamp.intel.com; QuoVadis Issuing CA G4; QuoVadis Root Certification Authority
Internal Name ME
Copyright Copyright (C), Intel Corporation. All rights reserved.
Certificate Chain Summary
Intel(R) Embedded Subsystems and IP Blocks Group #1 Primary
Validity Period: 2018-10-24 06:57:56 → 2020-10-23 06:57:56
Signature Algorithm: sha256RSA
Serial Number: 56 00 00 08 2B 1E 36 C5 6B 00 27 6A 8A 00 00 00 00 08 2B
Intel External Issuing CA 7B #2 Chain
Validity Period: 2015-10-28 00:00:00 → 2021-06-17 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 06 9B 5E 99 27 72 84 C8 76 7F 13 68 A7 DE B0 F3
COMODO RSA Certification Authority #3 Chain
Validity Period: 2010-01-19 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 4C AA F9 CA DB 63 6F E0 1F F7 4E D8 5B 03 86 9D
COMODO RSA Certification Authority #4 Chain
Validity Period: 2011-04-11 22:06:20 → 2021-04-11 22:16:20
Signature Algorithm: sha1RSA
Serial Number: 61 18 54 86 00 00 00 00 00 24
QuoVadis Issuing CA G4 #5 Chain
Validity Period: 2014-05-30 16:35:55 → 2021-03-17 18:33:33
Signature Algorithm: sha256RSA
Serial Number: 69 B2 D1 CC F0 2E 20 DC C9 5C 62 89 4F 7F 9E 5F 5F C0 57 BF
timestamp.intel.com #6 Chain
Validity Period: 2018-04-20 16:52:41 → 2021-03-17 18:33:33
Signature Algorithm: sha256RSA
Serial Number: 3C A5 D5 25 1F 75 29 A5 BA 3C 73 B4 49 6F A2 C1 B0 C5 6C 9F

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware