home

game.exe

Warface

MailRU

Publisher:
Crytek GmbH  (signed by MailRU)

Product:
Warface

Version:
1, 1, 1, 694

MD5:
030160735b2cb9a5fc639da9822f82ee

SHA-1:
dc7404bb4796ce47dd99cf15c7c45293ca3f6f4e

SHA-256:
459669eab9a91e76dff0a67356f2886d45dbd6d23c5bc4c098d2efb3d001f804

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 6:39:19 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Vilsel
2.1.4+

File size:
18.3 MB (19,175,976 bytes)

Product version:
1, 1, 1, 694

Copyright:
(C) 2007 Crytek GmbH

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\mail.ru\warface\bin32release\game.exe

Digital Signature
Signed by:
MailRU

Authority:
MailRU

Valid from:
11/18/2013 11:11:03 AM

Valid to:
11/18/2014 11:11:03 AM

Subject:
CN=MailRU

Issuer:
CN=MailRU

Serial number:
009EBB669FE7502B51

File PE Metadata
Compilation timestamp:
10/7/2014 8:31:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.0

CTPH (ssdeep):
393216:eRsDyYBUGSNtxVlsdn0kib5GnUmFdeKG77gdTolWUuN8lgRK0oWHWUt:eRsDyYBUXD1sx0WgKq7g5ogY/PK

Entry address:
0x29C32

Entry point:
FF, 25, F4, D6, AF, 01, FF, 25, F4, D6, AF, 01, FF, 25, F4, D6, AF, 01, FF, 25, B0, D0, AF, 01, 0B, B5, 02, 61, 0E, F5, 1F, 60, 0B, 64, 87, 35, 57, 2C, 1C, 52, 31, C0, 13, 99, A3, 08, B5, 9B, 80, 65, 18, FC, 0F, 2E, 4E, C4, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E8, 00, D3, 52, 00, FF, 25, B4, D0, AF, 01, 00, 00, 00, 00, 00, E8, F0, D2, 52, 00, FF, 25, B8, D0, AF, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
17 MB (17,801,281 bytes)

Scan game.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.