top title background image
flash

Rubberduck.Setup.2.5.0.5244.exe

Status: finished
Submission Time: 2020-03-26 10:03:26 +01:00
Clean

Comments

Tags

Details

  • Analysis ID:
    218151
  • API (Web) ID:
    333228
  • Analysis Started:
    2020-03-26 10:03:27 +01:00
  • Analysis Finished:
    2020-03-26 10:22:49 +01:00
  • MD5:
    eb6dbb4493eb8db45423588eddf5757e
  • SHA1:
    c4250d8779f7dc4f678bc952e415e55cecb63af5
  • SHA256:
    46019bc48ea5cc763ef8ed2bb21c56554ffaa56cd5efb252fd3dc772dae101c7
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 5
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
clean
Score: 5
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Cmdline fuzzy

IPs

IP Country Detection
2.5.0.52
France

URLs

Name Detection
http://fsf.org/
https://github.com/rubberduck-vba/Rubberduck?
https://github.com/rubberduck-vba/Rubberduck/issues/new
Click to see the 31 hidden entries
https://github.com/icsharpcode/AvalonEdit
https://github.com/yusukekamiyamane/fugue-icons
http://rubberduckvba.com
http://rubberduckvba.com/build/version/stablechttp://rubberduckvba.com/build/version/prerelease
http://www.castleproject.org/
http://www.remobjects.com/ps
http://www.gnu.org/licenses/.
http://rubberduckvba.comq
http://github.com/rubberduck-vba/Rubberduck
https://github.com/rubberduck-vba/Rubberduck/releases
http://icsharpcode.net/sharpdevelop/avalonedit#ICSharpCode.AvalonEdit.Highlighting
https://github.com/rubberduck-vba/Rubberduck/releases/latest
http://icsharpcode.net/sharpdevelop/avalonedit#ICSharpCode.AvalonEdit.HighlightingQ
http://www.gnu.org/licenses/
http://rubberduckvba.com)
https://github.com/rubberduck-vba/Rubberduck/issues/new/choose?
http://icsharpcode.net/sharpdevelop/syntaxdefinition/2008
http://www.gnu.org/philosophy/why-not-lgpl.html
http://icsharpcode.net/sharpdevelop/syntaxdefinition/20081Error
http://www.twitter.com/rubberduckvba?
http://icsharpcode.net/sharpdevelop/avalonedit
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
http://github.com/rubberduck-vba/Rubberduck/Issues/New
http://www.innosetup.com/
http://stackoverflow.com/a/3652980/1188513
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdline
https://github.com/icsharpcode/SharpDevelop.git
http://rubberduckvba.com/?
http://rubberduckvba.com0http://rubberduckvba.com0http://rubberduckvba.com
https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf8
https://github.com/dotnet/corefx/tree/30ab651fcb4354552bd4891619a0bdd81e0ebdbf

Dropped files

Name File Type Hashes Detection
C:\ProgramData\Rubberduck\is-JDT9P.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-N3NA5.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-MHC4M.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
Click to see the 88 hidden entries
C:\ProgramData\Rubberduck\is-M2M7U.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-LVDNK.tmp
data
#
C:\ProgramData\Rubberduck\is-LQRTP.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-LOU08.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-LFB0I.tmp
MSVC program database ver 7.00, 512*6591 bytes
#
C:\ProgramData\Rubberduck\is-KR79E.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-KFD1L.tmp
MSVC program database ver 7.00, 512*2627 bytes
#
C:\ProgramData\Rubberduck\is-KDSP4.tmp
data
#
C:\ProgramData\Rubberduck\is-K2K92.tmp
MSVC program database ver 7.00, 512*1263 bytes
#
C:\ProgramData\Rubberduck\is-N5CL2.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-HT6HJ.tmp
MSVC program database ver 7.00, 512*75 bytes
#
C:\ProgramData\Rubberduck\is-GTFHE.tmp
MSVC program database ver 7.00, 512*155 bytes
#
C:\ProgramData\Rubberduck\is-GM1J0.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-GLH6S.tmp
MSVC program database ver 7.00, 512*511 bytes
#
C:\ProgramData\Rubberduck\is-FHM01.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-EFARP.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-EDIVT.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
#
C:\ProgramData\Rubberduck\is-E8TFE.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-DCICL.tmp
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-DCG1S.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-V0F11.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rubberduck\is-D5TT3.tmp
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rubberduck\is-8IFB4.tmp
Windows desktop.ini, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rubberduck\Uninstall Rubberduck.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Mar 26 16:05:04 2020, mtime=Thu Mar 26 16:05:04 2020, atime=Thu Mar 26 16:04:22 2020, length=1209553, window=hide
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rubberduck\Rubberduck VBA website.url
MS Windows 95 Internet shortcut text (URL=<http://rubberduckvba.com>), ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rubberduck\Repair VBE Addin registration.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Mar 26 16:05:06 2020, mtime=Thu Mar 26 16:05:06 2020, atime=Sun Dec 22 06:06:32 2019, length=191, window=hide
#
C:\Users\user\AppData\Local\Temp\is-R48VO.tmp\Rubberduck.Setup.2.5.0.5244.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
#
C:\Users\user\AppData\Local\Temp\is-FH4FB.tmp\_isetup\_setup64.tmp
PE32+ executable (console) x86-64, for MS Windows
#
C:\Users\user\AppData\Local\Temp\Setup Log 2020-03-26 #001.txt
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\it\is-NQPPD.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-V3S61.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-V0PHP.tmp
MSVC program database ver 7.00, 512*467 bytes
#
C:\ProgramData\Rubberduck\is-AP0D2.tmp
MSVC program database ver 7.00, 512*27 bytes
#
C:\ProgramData\Rubberduck\is-UO7SR.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-UIC2F.tmp
MSVC program database ver 7.00, 512*363 bytes
#
C:\ProgramData\Rubberduck\is-TLAFF.tmp
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-T2VL4.tmp
DOS batch file, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-SQ0SL.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-SCLRO.tmp
MSVC program database ver 7.00, 512*31 bytes
#
C:\ProgramData\Rubberduck\is-RT9RF.tmp
MSVC program database ver 7.00, 512*911 bytes
#
C:\ProgramData\Rubberduck\is-QS3PA.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-PRBLH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-PEVQ9.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\es\is-7B3VN.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-2DSCH.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-0SEC8.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-0674U.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\fr\is-T7A3B.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\fr\is-SCVVC.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\fr\is-OA2KE.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\fr\is-6MJ4M.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\fr\is-6DB7Q.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\es\is-N32S7.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\es\is-EP739.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\es\is-EJ118.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-38R98.tmp
MSVC program database ver 7.00, 512*127 bytes
#
C:\ProgramData\Rubberduck\de\is-TS2KA.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\de\is-IRNHI.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\de\is-GAITA.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\de\is-EJGEV.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\de\is-DBMR2.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\cs\is-N94B5.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\cs\is-M9IFO.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\cs\is-IS6B9.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\cs\is-EEB2T.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\Installers\unins000.dat
data
#
C:\ProgramData\Rubberduck\is-88I23.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-AO2DI.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-AG1J8.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-AC06O.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-9T2VD.tmp
XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-9S6BC.tmp
MSVC program database ver 7.00, 512*487 bytes
#
C:\ProgramData\Rubberduck\is-9RCS5.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-9NI70.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-91D1U.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-8MSQQ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-8EO6T.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\Installers\is-NJCSS.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
#
C:\ProgramData\Rubberduck\is-73R19.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
#
C:\ProgramData\Rubberduck\is-6I5D5.tmp
MSVC program database ver 7.00, 512*207 bytes
#
C:\ProgramData\Rubberduck\is-6I25M.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-6478P.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-6139T.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-4E2I9.tmp
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-45D4K.tmp
Little-endian UTF-16 Unicode text, with CRLF line terminators
#
C:\ProgramData\Rubberduck\is-3FMOJ.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\ProgramData\Rubberduck\is-3A26D.tmp
MSVC program database ver 7.00, 512*5463 bytes
#
C:\ProgramData\Rubberduck\is-39G8U.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#