home

setup.tmp

Konstantin Chigakov

Publisher:
Konstantin Chigakov  (signed and verified)

Description:
Setup/Uninstall

Version:
51.52.0.0

MD5:
9f26e73a0e361c69a7587b4d8a529a15

SHA-1:
aa10a3bb810ad0d0cb7a044a132290bec80abe42

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/5/2025 5:29:23 AM UTC  (today)

File size:
705.3 KB (722,224 bytes)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\setup.tmp

Digital Signature
Signed by:
Konstantin Chigakov

Authority:
Unizeto Technologies S.A.

Valid from:
2/25/2016 9:00:08 PM

Valid to:
7/28/2016 6:34:17 AM

Subject:
E=info@masterslabs.com, CN=Konstantin Chigakov, OU=Masters ITC Software, O=Konstantin Chigakov, C=RU

Issuer:
CN=Certum Code Signing CA SHA2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
39DD4710A96C9880C13432C10DFB5BFA

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:hQhCh1/aLmSKrPD37zzH2A6QGgx/bsQYq9KgERkVfzrrNVyblD4cNaf/yxyR7:hQYh1yLmSKrPD37zzH2A6QD/IpqggE2N

Entry address:
0x99AE0

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, 57, E8, 56, 98, F6, FF, E8, AD, BB, F6, FF, E8, 34, C8, F6, FF, E8, D7, C8, F6, FF, E8, 5A, FE, F6, FF, E8, 6D, 6C, F7, FF, E8, D0, 6E, F7, FF, E8, 27, 8E, F7, FF, E8, 3A, F5, F7, FF, E8, 35, B4, F8, FF, E8, 5C, 5C, F9, FF, E8, 43, 6F, F9, FF, E8, 8E, 5C, FB, FF, E8, 55, 61, FB, FF, E8, 54, 69, FB, FF, E8, 33, 7D, FB, FF, E8, 26, 97, FB, FF, E8, 19, D6, FB, FF, E8, 18, E5, FB, FF, E8, 2B, F8, FB, FF, E8, 42, AF, FC, FF, E8, 6D, 37, FD, FF, E8, 84, F9, FD, FF, E8, 93, AE, FE...
 
[+]

Entropy:
6.5430

Developed / compiled with:
Microsoft Visual C++

Code size:
611.5 KB (626,176 bytes)

Scan setup.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.