» airmech.exe_636020330819873839
Overview
Analysis
File Details

airmech.exe_636020330819873839

Carbon Games Inc.

File name:

Publisher:

Carbon Games Inc. (signed and verified)

MD5:

8fb30d6f816321f4d3f795617ae67f5e

SHA-1:

8aea98928cf2df4bd52238257924a59f50812367

SHA-256:

553e571d7b6d53ebcd786b2ecc09cdc5ab46cf646e4abcba4698da8414ffc827

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/7/2024 8:17:14 PM UTC (today)

File size:

7.6 MB (7,929,856 bytes)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\airmech.exe_636020330819873839

Digital Signature

Signed by:

Carbon Games Inc.

Authority:

Carbon Games Inc.

Valid from:

9/5/2011 8:45:45 PM

Valid to:

9/4/2012 8:45:45 PM

Subject:

L=Seattle, S=Washington, C=US, CN=carbongames.com, O=Carbon Games Inc.

Issuer:

L=Seattle, S=Washington, C=US, CN=carbongames.com, O=Carbon Games Inc.

Serial number:

00E84FDEB7AA3E6F00

File PE Metadata

Compilation timestamp:

1/27/2011 5:43:15 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:f55nTl0Yey/zFPe9Z20e9nmhksJvs0j9W+GFmEIa5x:nn2Yey/zYP20CY9vlj42EI

Entry address:

0x21410E

Entry point:

E8, 62, 21, DB, 49, E9, 62, 21, 2F, B8, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 62, 21, A8, 6F, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 62, 21, 46, F9, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 62, 21, 38, BC, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 62, 21, 43, BC, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 62, 21, A8, 6F, 6A, 22, 59, 89, 08, 8B, F1, EB, AD... 
[+]

Entropy:

3.1088

Code size:

2.3 MB (2,405,888 bytes)

Scan airmech.exe_636020330819873839 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.