home

garena4795.exe

Hoa Binh Informatics .,JSC

Publisher:
Hoa Binh Informatics .,JSC  (signed and verified)

MD5:
9a1c7eec1daec53da92b34b9ae433d7d

SHA-1:
7032316f37b7455a1cabc0e9c5710ad1a2cfbad4

SHA-256:
a6cc365ce2f3b61a63d44f3090cce266a69a444db2e7a945fc534b06fe6abfa3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:42:03 AM UTC  (today)

File size:
2.5 MB (2,619,672 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\temp\garena4795.exe

Digital Signature
Signed by:
Hoa Binh Informatics .,JSC

Authority:
VeriSign, Inc.

Valid from:
8/28/2013 7:00:00 AM

Valid to:
8/28/2016 6:59:59 AM

Subject:
CN="Hoa Binh Informatics .,JSC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Hoa Binh Informatics .,JSC", L=Ha Noi, S=Ha Noi, C=VN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
39D3C41BF5C01DCA0F41666D7173B8AE

File PE Metadata
Compilation timestamp:
12/10/2015 12:07:15 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:TskIEURqorQ4tgeotBV5KHB5LUTluoUH+Big8m:QkBQrjgLtlKvLzuiRm

Entry address:
0x2421A5

Entry point:
E9, DB, 07, 00, 00, 89, C3, 0F, A3, D3, F9, E8, 11, 03, 00, 00, 00, 00, 53, 74, 72, 54, 6F, 49, 6E, 74, 45, 78, 41, 00, 4E, B9, DE, 00, A8, 16, D0, A4, 7B, A8, FB, 0E, 28, 43, 63, 86, A6, C3, EA, BB, 61, 66, 09, 7E, 8E, F9, 84, 41, FC, 0F, 2D, 51, 78, 9E, 43, E9, B4, 59, 24, 93, 85, F9, BC, CF, E2, 83, 0E, 03, DA, 91, C1, D4, 7A, 45, 64, 83, 97, 63, B3, 95, 6D, 12, 49, 75, E9, C4, 4F, D1, 79, 8A, BD, 2A, 6B, BC, 5A, 2A, D4, 06, EA, BA, 92, C6, 73, 46, D1, 04, A3, 3D, E2, D3, FF, 0F, 32, 8D, 02, B1, 39, BA...
 
[+]

Entropy:
2.0885

Packer / compiler:
Xtreme-Protector v1.05

Code size:
1 MB (1,064,960 bytes)

Scan garena4795.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.