» rubyinstaller-1.8.7-p302.tmp
Overview
Analysis
File Details

rubyinstaller-1.8.7-p302.tmp

Luis Lavena

File name:

Publisher:

Luis Lavena (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

db965c309149e21341dc4a062cdf6dd0

SHA-1:

132ca6a34505ef20ac338d9c0cc2d566a9c89801

SHA-256:

293343337222176b2d35e357e6a392e6d05cfa67f60e1f8201d8f0bc891571f0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 7:53:43 AM UTC (today)

File size:

1.1 MB (1,180,432 bytes)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\rubyinstaller-1.8.7-p302.tmp

Digital Signature

Signed by:

Luis Lavena

Authority:

The USERTRUST Network

Valid from:

9/25/2009 5:30:00 AM

Valid to:

8/20/2010 5:29:59 AM

Subject:

CN=Luis Lavena, O=Luis Lavena, STREET=Rondeau 2265, L=San Miguel de Tucuman, S=Tucuman, PostalCode=T4000AIS, C=AR

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

59B97605B3919901F1361C3D51BF9983

File PE Metadata

Compilation timestamp:

6/10/2010 8:03:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:mJ2NdP5G7xKIe9DNfw685v77r4TMqvKPza4mAaEKdc0cCkqgZ3wxyA6:VrNB8d77qrAqdeCn7C

Entry address:

0xFDEA0

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, C8, C7, 4F, 00, E8, A5, B0, F0, FF, 6A, EC, A1, 70, 1D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 40, BF, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 70, 1D, 50, 00, 53, E8, 95, C1, F0, FF, 33, C0, 55, 68, 1B, DF, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, E8, B8, F0, FF, E8, 17, E6, FF, FF, A1, 00, C4, 4F, 00, 50, 68, 64, C4, 4F, 00, A1, 70, 1D, 50, 00, 8B, 00, E8, 84, DF, F7, FF, E8, 6B, E6, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, C0, 67, F0, FF... 
[+]

Entropy:

6.3992

Developed / compiled with:

Microsoft Visual C++

Code size:

1012 KB (1,036,288 bytes)

Scan rubyinstaller-1.8.7-p302.tmp - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.