» bella_design.exe
Overview
Analysis
File Details

bella_design.exe

Alawar Entertainment Inc

File name:

bella_design.exe

Publisher:

Alawar Entertainment Inc (signed and verified)

MD5:

9e390ca4f621ebbdb0bb263307422a0f

SHA-1:

4979a1d828fa24075b1278394daf84201170f2ad

SHA-256:

c08c8fd9fae17955b087804c7f7e78b129e17613d5b43911bc3431a6b0772f28

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 7:35:52 AM UTC (today)

File size:

2 MB (2,140,488 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\alawar.pl\bella design\bella_design.exe

Digital Signature

Signed by:

Alawar Entertainment Inc

Authority:

VeriSign, Inc.

Valid from:

12/19/2011 1:00:00 AM

Valid to:

1/1/2015 12:59:59 AM

Subject:

CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

650A27A04DBAA9DF0C06DEBBA3983054

File PE Metadata

Compilation timestamp:

3/6/2014 4:55:05 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:pzrKL6ie64NCWJefXqVGMSp4HHk7bp96goZmfusu:pnKZe6ACWqcBSCHE7O9Zmfi

Entry address:

0x1000

Entry point:

68, 01, 70, 7D, 00, E8, 01, 00, 00, 00, C3, C3, 92, A8, D1, 76, 68, B6, 6B, 0D, BC, C1, 8C, 8F, 65, FA, 09, 8E, EA, 0E, DB, C6, CB, 4D, CD, 57, 6A, 80, 61, DE, 22, 4A, 35, 86, 07, 9C, 60, 2E, 82, DD, E8, 39, F5, 87, 2E, D9, 77, 7F, 30, 69, 68, 9C, F1, 4E, 40, 43, D7, 66, AE, CB, D2, 94, 2D, 67, 94, A3, F3, 7E, 7A, 37, 42, 2B, ED, 29, 34, EB, E1, 88, 8D, 5C, BD, 73, 30, 7A, 2B, D3, 4C, A5, 77, AD, 8A, A9, CD, 12, 9F, E3, 88, 70, 9F, 50, 82, CB, 0F, 98, 09, 9F, 17, 05, 58, D5, 14, 4F, F6, C5, 54, E0, 78, 7B... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

91.5 KB (93,696 bytes)

Scan bella_design.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.