home

Setup.exe

Tarma InstallMate

Tarma Software Research Pty Ltd

Publisher:
Tarma Software Research Pty Ltd  (signed and verified)

Product:
Tarma® InstallMate

Description:
Tarma® InstallMate Setup

Version:
2011.06.30.0845A

MD5:
f2036dcb4be5cb487e8b44e418c500a9

SHA-1:
d3ed598423a0f12d33257988156788d9d55b4aed

SHA-256:
cbcd9a052a3707ed5e4ec0480f019cddea22cabc011df8311fb4a35f4b7e4284

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 9:41:36 PM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Artemis!BDDE193B88BB
5600.6491

Trend Micro House Call
TROJ_GEN.F47V0527
7.2.43

File size:
15.1 KB (15,496 bytes)

Product version:
7.1.4199

Copyright:
© 1990-2011 Tarma Software Research Pty Ltd

Trademarks:
Tarma® is a registered trademark of Tarma Software Research Pty Ltd

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\installmate\{a4583743-d0da-49de-9b87-0ba6a2086f1e}\setup.exe

Digital Signature
Signed by:
Tarma Software Research Pty Ltd

Authority:
Thawte, Inc.

Valid from:
7/29/2010 7:00:00 PM

Valid to:
8/5/2012 6:59:59 PM

Subject:
CN=Tarma Software Research Pty Ltd, OU=DEVELOPMENT, O=Tarma Software Research Pty Ltd, L=Melbourne, S=Victoria, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4D0216133DF073BA8641E78D2A7F3C33

File PE Metadata
Compilation timestamp:
6/29/2011 5:49:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
192:0G5Kon5K3YKDPp3MJg+54NSxyowJL/8ngkTh8Tou7+wp1d:0an5XKDPp3IgkxYJLyPub

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 14, 01, 00, 00, 56, 68, 04, 01, 00, 00, 8D, 85, EC, FE, FF, FF, 50, 6A, 00, FF, 15, 1C, 20, 40, 00, 8D, 85, EC, FE, FF, FF, 50, FF, 15, 18, 20, 40, 00, 8D, 84, 05, EC, FE, FF, FF, EB, 0A, 8D, 48, FF, 80, 39, 5C, 74, 0C, 8B, C1, 8D, 8D, EC, FE, FF, FF, 3B, C1, 77, EC, 68, 60, 20, 40, 00, 50, FF, 15, 14, 20, 40, 00, 8D, 85, EC, FE, FF, FF, 50, FF, 15, 10, 20, 40, 00, 85, C0, 75, 0D, FF, 15, 0C, 20, 40, 00, 50, FF, 15, 08, 20, 40, 00, 68, 4C, 20, 40, 00, 50, FF, 15, 04, 20, 40, 00, 8B, F0...
 
[+]

Entropy:
5.8549

Developed / compiled with:
Microsoft Visual C++

Code size:
512 Bytes (512 bytes)

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.