home

AVA.exe

Alliance of Valiant Arms

Redduck Inc.

Publisher:
Redduck  (signed by Redduck Inc.)

Product:
Alliance of Valiant Arms

Description:
AVA

Version:
1, 2, 1, 3

MD5:
6a800c7ddb3c9a02a081506469e0837e

SHA-1:
e04eb68f08b3d34b56105dfdfdd0942edb097e9c

SHA-256:
55a27e3de664d003d554a2effcfcd1058d456b8e397d8e83e7afaa5e7de76353

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/27/2024 2:29:52 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.177.40

File size:
6.9 MB (7,258,816 bytes)

Product version:
1, 2, 1, 3

Copyright:
Copyright (C) 2008

Original file name:
AVA.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\garenaava\gamedata\apps\avatw\binaries\ava.exe

Digital Signature
Signed by:
Redduck Inc.

Authority:
VeriSign, Inc.

Valid from:
9/24/2013 8:00:00 AM

Valid to:
9/25/2015 7:59:59 AM

Subject:
CN=Redduck Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Redduck Inc., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F66842B4F9C458B72136F0AE96924B7

File PE Metadata
Compilation timestamp:
10/7/2014 12:04:23 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:8AfXzzP0ALcYxo9S/XUVJfiIRurW0LoWCn6BBBa554qKjKpTph2QT6etpdgx50/x:JkyJxeS/EVJnulC6O4qKmteohpdMTw

Entry address:
0x13C1000

Entry point:
60, E8, 00, 00, 00, 00, 59, 81, C1, 4A, 18, 00, 00, FF, 11, 00, 53, 3B, 0A, 8B, 10, 1F, 76, E2, 99, E9, FB, 01, 5F, 6A, 1A, F3, E9, 8B, 3D, 57, CC, 17, 3B, 46, 0F, A3, 7C, BF, CB, 33, ED, 34, DF, D8, A4, 58, A4, 0C, CF, 0A, D4, 62, B6, 13, F6, F9, A7, CF, DE, C1, 43, AD, 5D, 67, D0, 90, 83, 8B, 8F, 47, E3, F8, 8B, FD, 14, AF, 41, 21, 5A, 63, 9B, 4C, DA, DC, D0, 9A, 77, 5B, 59, F3, 61, 9E, 9C, 86, 55, AC, D7, 80, 4C, 3F, 58, 39, 44, 6E, 05, 99, B3, D2, 1F, BA, 08, ED, 3D, E8, 47, 0D, 32, 97, 28, 6D, DF, F9...
 
[+]

Entropy:
7.9249

Packer / compiler:
ASPack v1.08.04

Code size:
13.4 MB (14,012,416 bytes)

Windows Firewall Allowed Program
Name:
C:\Program Files\GarenaAVA\GameData\Apps\AVATW\Binaries\AVA.exe


Scan AVA.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.