Where exact does this specific file come from/found = source?
DropboxUpdateSetup.exe 1.3.761.1
Some of the data is a bit weird. The certificate looks manipulated:
but that does not automatic means, malicious. One have to compare it with a original " update " file from Dropbox main site. I was actually able to find the exact same version number that also have zero flags on VT, and where VT shows the signature correct/valid:
VirusTotal
www.virustotal.com
Same version number, but different Hash values. Even the compile date on these 2 files is exact the same, so that's weird. But the first submissions dates are different. Lets see what the original file from Dropbox url shows with the signature:
PE Header and the Overlay Hash is different. Also got some " appended " data.