home

Ancient Castle 3D Screensaver.exe

Ancient Castle 3D Screensaver

3Planesoft

Publisher:
3Planesoft

Product:
Ancient Castle 3D Screensaver

Version:
1, 1, 0, 8

MD5:
9e32ea165c35cba2eb25a5df371920c6

SHA-1:
3b7349bd695e35ccff7734652dd579cb3a3a30f7

SHA-256:
07670f2bcf4d4bcb9135fbbf1e66bbf8d68916b3b3c7af54fd8ad96d4ad8d4a3

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
1/2/2026 9:48:48 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.EXECryptor
0.98/18155

Comodo Security
Heur.Suspicious
11025

File size:
12.2 MB (12,785,664 bytes)

Product version:
1, 1, 0, 8

Copyright:
Copyright (C) 2003-2006 3Planesoft. All rights reserved.

Original file name:
Ancient Castle 3D Screensaver.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\ancient castle 3d screensaver.exe

File PE Metadata
Compilation timestamp:
2/28/2007 4:36:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
196608:h9xmgJHcKoquA07qyaBiAm4VbLcur42JUOe608tG9FbgxgoIkVu9uE51uIn750n:h9nJ8Kbxu1aQcHcwYdwGXsokVuT1d7G

Entry address:
0x1C9E2BF

Entry point:
E8, 3B, FF, FF, FF, 05, 2C, 40, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, F6, 2A, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 44, 45, CF, 54, 18, F3, 07, AF, EF, EB, 87, 5E, CB, 0C, 18, E7, 48, 71, 90, 83, AD, F3, 6B, 63, CF, EC, 01, 58, 36, 26, 05, E6, F0, 73, 29, 1D, BB, E9, CE, 21, B7, AF, 3A, 1E, 70, A7, D9, A6, 97, C1, EC, 8F, 3C, F8, 3B, C7, 33, 53, E5, BA, 7C, 09, 41, 8E, B3, 2F, 09, 4C, F5, 16, 51, E2, 0B, E3, 9F, 99, 91, AE, 83, 61, 27, F5, 73, 8F, 7D, 04, 3C, 77, 95, B0, B3, 2F...
 
[+]

Entropy:
7.9094  (probably packed)

Code size:
992 KB (1,015,808 bytes)

Scan Ancient Castle 3D Screensaver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.