» Setup.exe
Overview
Analysis
File Details

Setup.exe

Tarma Installer

Tarma Software Research Pty Ltd

File name:

Setup.exe

Publisher:

Tarma Software Research Pty Ltd (signed and verified)

Product:

Tarma® Installer

Version:

2011.03.11.1355U

MD5:

efcf65b0e8c189cc87fdb87964c352f2

SHA-1:

1ee32152bddf777afe6520b162634265e0c447b5

SHA-256:

00115b8579d11fa503567176c39eb71fe714ae8789e86f9994a6b142303c9080

Scanner detections:

5 / 68

Status:

Clean (5 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/25/2024 8:16:43 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Trash.Gen

7.11.144.158

Dr.Web

Trojan.Damaged.1

9.0.1.037

Malwarebytes

PUP.Optional.Tarma.A

v2016.02.06.10

Panda Antivirus

Adware/WebCake

16.02.06.10

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

9339

File size:

39.7 MB (41,603,072 bytes)

Product version:

5.9.4088

Trademarks:

Tarma® is a registered trademark of Tarma Software Research Pty Ltd

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\ProgramData\tarma installer\{361e80be-388b-4270-bf54-a10c2b756504}\setup.exe

Digital Signature

Signed by:

Tarma Software Research Pty Ltd

Authority:

Thawte, Inc.

Valid from:

7/30/2010 7:00:00 AM

Valid to:

8/6/2012 6:59:59 AM

Subject:

CN=Tarma Software Research Pty Ltd, OU=DEVELOPMENT, O=Tarma Software Research Pty Ltd, L=Melbourne, S=Victoria, C=AU

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

4D0216133DF073BA8641E78D2A7F3C33

File PE Metadata

Compilation timestamp:

3/11/2011 10:14:09 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:wQhOUOArOtVh57NH/8frYPP9LqcjiEBgeNfXAHhdNF6v95z2xynpQeKynzMYzAyC:wqORC8VhzXiETIBdNcl6bBQncm87R

Entry address:

0x196EA

Entry point:

E8, FA, FC, FF, FF, E9, 4C, FF, FF, FF, 55, 8B, EC, 83, EC, 10, 56, 57, 8B, FA, 85, FF, 74, 03, 83, 27, 00, 8B, 75, 08, 85, F6, 74, 03, 83, 26, 00, 8D, 45, F0, 50, 6A, 00, 68, 00, 10, 00, 00, 6A, 02, 5A, E8, 1D, A9, 00, 00, 85, C0, 74, 0B, 85, F6, 74, 02, 89, 06, 83, C8, FF, EB, 4F, 8B, 45, F0, 8B, 48, 10, 81, F9, 74, 69, 7A, 32, 74, 34, 81, F9, 74, 69, 7A, 33, 74, 2C, 66, 81, 38, 4D, 5A, 75, 17, 81, 78, 24, 74, 73, 6C, 35, 75, 0E, 85, FF, 6A, 02, 5E, 74, 18, 8B, 40, 38, 89, 07, EB, 11, 85, F6, 74, 06, C7... 
[+]

Entropy:

0.0713

Code size:

145.5 KB (148,992 bytes)

Scan Setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.