» elfbowling.rwg
Overview
Analysis
File Details

elfbowling.rwg

MumboJumbo

File name:

elfbowling.rwg

Publisher:

MumboJumbo (signed and verified)

MD5:

e1c78aee1409a4ec6f8575b5cbc16cd9

SHA-1:

5650aae3c5711735e1bf49de495a63a26c65922b

SHA-256:

d1ae475b306709dd90582e3ef7d449c704be93dbafc677e7ff434514e4ceb4b1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 2:31:02 PM UTC (today)

File size:

1.6 MB (1,659,008 bytes)

Digital Signature

Signed by:

MumboJumbo

Authority:

VeriSign, Inc.

Valid from:

11/10/2006 8:00:00 AM

Valid to:

11/11/2009 7:59:59 AM

Subject:

CN=MumboJumbo, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=MumboJumbo, L=Dallas, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4E15BF4718157A1B16384B24517CFBE0

File PE Metadata

Compilation timestamp:

6/7/2008 10:57:51 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:67HO7AveuDxTnw8PvA9SbZMz3G9/ws1I1z+ShM5oXZs4MjvISYda:67nm2IcZI3G9/wG8CSG6XZnTS5

Entry address:

0x14931C

Entry point:

F6, E3, F5, E8, 2A, 67, 19, 4A, 3F, 46, DC, CE, 7A, AE, B2, CE, 32, AB, 04, 27, 35, 1C, AC, C5, F5, FE, CE, 9E, FB, 96, E9, D4, 67, 3A, 7D, 6D, 1F, FC, F7, 12, BA, A0, B7, 1D, BB, 88, FA, 78, FD, 20, DE, 95, A7, C4, DC, 5A, ED, 26, 82, AC, E7, 3C, 52, DF, 91, 71, 43, 32, E0, DE, 97, DD, 71, A8, 68, 45, E2, B6, 65, F1, 68, 7F, 6E, A3, 84, 2B, 17, F6, 67, 33, A0, 5D, 14, 85, 40, AC, 6C, 9D, 65, 1C, 75, 37, C6, 33, D1, 73, F5, C3, 2E, 1C, C6, 27, 7C, 4E, 5B, 6C, 49, 0B, 7E, 07, 5D, 98, AE, 99, EB, B8, 51, 2D... 
[+]

Entropy:

6.7644

Code size:

1.3 MB (1,344,000 bytes)

Scan elfbowling.rwg - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.