home

boards.exe

Ganymede Sp. z o.o.

Publisher:
Ganymede Sp. z o.o.  (signed and verified)

MD5:
7f8fbcfa50f8aa4d3e22f7d83d5650b8

SHA-1:
9fbffa5bda1ba88bc487aa2b9ea3582da80a6ed0

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 4:21:05 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
4.6 MB (4,786,856 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ganymede\boards.exe

Digital Signature
Signed by:
Ganymede Sp. z o.o.

Authority:
Thawte, Inc.

Valid from:
5/8/2013 3:00:00 AM

Valid to:
7/19/2015 2:59:59 AM

Subject:
CN=Ganymede Sp. z o.o., OU=ONLINE GAMES, O=Ganymede Sp. z o.o., L=Krakow, S=Malopolska, C=PL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
316784E2320B6B45CE3DD568E5129085

File PE Metadata
Compilation timestamp:
7/15/2013 1:45:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:hDFXYHGyeUK97Dce1vh3ARnCjYE2ps0EYdBb/wk:xc7ex9Pc0hC1tpsstF

Entry address:
0x2F64E1

Entry point:
E8, 79, 12, 01, 00, E9, 17, FE, FF, FF, B8, EC, 6E, 70, 00, A3, B8, A0, 83, 00, C7, 05, BC, A0, 83, 00, CD, 65, 70, 00, C7, 05, C0, A0, 83, 00, 8B, 65, 70, 00, C7, 05, C4, A0, 83, 00, BF, 65, 70, 00, C7, 05, C8, A0, 83, 00, 35, 65, 70, 00, A3, CC, A0, 83, 00, C7, 05, D0, A0, 83, 00, 66, 6E, 70, 00, C7, 05, D4, A0, 83, 00, 4B, 65, 70, 00, C7, 05, D8, A0, 83, 00, B5, 64, 70, 00, C7, 05, DC, A0, 83, 00, 44, 64, 70, 00, C3, E8, 9B, FF, FF, FF, E8, 22, 13, 01, 00, 83, 7C, 24, 04, 00, A3, 6C, 4E, 88, 00, 74, 05...
 
[+]

Code size:
3.3 MB (3,407,872 bytes)

Scan boards.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.