home

dsta0001660.exe

RogueWar Application

Bethesda Softworks LLC

Publisher:
Bethesda Softworks LLC  (signed and verified)

Product:
RogueWar Application

Version:
1. 0. 0. 0

MD5:
72d8f8bdd88911bb672740a4b85332e8

SHA-1:
5fa288e321b055a89507c160bbaef460b04295ec

SHA-256:
18707839ffa671e3b8052f15a6f15dad0600188409b74aaef7136d36ac88572c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:41:32 PM UTC  (today)

File size:
5.8 MB (6,081,408 bytes)

Product version:
1, 0, 0, 0

Copyright:
© 2009 Bethesda Softworks LLC

Trademarks:
Rogue Warrior™

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\windows\temp\dsta0001660.exe

Digital Signature
Signed by:
Bethesda Softworks LLC

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
8/13/2009 4:30:00 AM

Valid to:
8/14/2011 4:29:59 AM

Subject:
CN=Bethesda Softworks LLC, OU=External Development, O=Bethesda Softworks LLC, L=Rockville, S=Maryland, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
40F07A2028D0AB9E330DDA89AED61504

File PE Metadata
Compilation timestamp:
10/22/2009 1:38:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:7CFT4s373zDMxHw+/6j/yDRDl2MUWJ2Gppg/krPWZiovjrgIIIUGy:7AN5M+/yFl2MUWJ23cwlgIpUJ

Entry address:
0x748C40

Entry point:
B8, 45, FF, FF, FF, 90, 8B, 84, 04, BB, 00, 00, 00, A3, A8, D7, E3, 00, 89, 25, AC, D7, E3, 00, E8, 08, 00, 00, 00, 55, A7, 55, B4, 00, 91, 86, B5, 81, 04, 24, 97, 00, 00, 00, 50, 8B, 44, 24, 04, C1, E9, 00, 87, 04, 24, 81, 2C, 24, 96, 00, 00, 00, FF, 34, 24, 87, 04, 24, 8B, 00, 83, EC, 24, C7, 44, 24, 20, 18, A0, 05, 0A, C7, 44, 24, 1C, 5F, 00, 02, 00, 89, 4C, 24, 18, B9, 34, 8C, B4, 00, 89, 7C, 24, 14, 87, FF, 89, 4C, 24, 20, 33, C9, EB, 00, 8B, 7C, 24, 20, 8B, 3F, 90, 33, CF, 83, 44, 24, 20, 04, 66, FF...
 
[+]

Entropy:
7.8919  (probably packed)

Code size:
8.2 MB (8,577,024 bytes)

Scan dsta0001660.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.