home

GarenaTotal.exe

Garena Total

Bui Minh Hieu

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
HBM  (signed by Bui Minh Hieu)

Product:
Garena Total

Version:
1.0.0.1

MD5:
4efb154dcab698e1073e874dc6d2deb5

SHA-1:
10674a57d4ec57a6b876c1657d4dcea29277b2fa

SHA-256:
83feb5e11b6dbcdba5a4a35bef49b1d0ee180ef00f6cc014bb3bc2465c364cbd

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/10/2024 3:07:21 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0831
7.2.132

File size:
429 KB (439,304 bytes)

Product version:
1.0.0.1

Copyright:
(c) HBM. All rights reserved.

Original file name:
GarenaTotal.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Bui Minh Hieu

Authority:
Thawte, Inc.

Valid from:
6/25/2013 8:00:00 AM

Valid to:
6/22/2014 7:59:59 AM

Subject:
CN=Bui Minh Hieu, OU=Individual Developer, O=No Organization Affiliation, L=Hai Phong, S=Hai Phong, C=VN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
390FFB4CA3DF2C543CFF80F164F4BB2A

File PE Metadata
Compilation timestamp:
7/23/2013 6:20:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:eC8TszJdnhURvmLYWbSof37gv/UU06tZs4MOLFz/bR64pOcMjeiyF2gopNZkHdrz:eszhUp/UF6tZs4MOLh/o4pWGo5W

Entry address:
0x2D6C9

Entry point:
E8, 74, 6B, 00, 00, E9, 17, FE, FF, FF, FF, 35, 80, 17, 46, 00, E8, D6, 65, 00, 00, 85, C0, 59, 74, 02, FF, D0, 6A, 19, E8, FB, 59, 00, 00, 6A, 01, 6A, 00, E8, D4, 6C, 00, 00, 83, C4, 0C, E9, D9, 6B, 00, 00, 51, C7, 01, 1C, D4, 44, 00, E8, E8, 6C, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, B4, 05, FE, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 38, 6D, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 3B, 0D, D4, D8, 45, 00, 75...
 
[+]

Entropy:
6.3691

Code size:
282 KB (288,768 bytes)

Scheduled Task
Task name:
Auto-Joiner.exe

Trigger:
Logon (Runs on logon)


The file GarenaTotal.exe has been discovered within the following program.

Warcraft III: All Products
About 3% of users remove it
 
Powered by Should I Remove It?

Scan GarenaTotal.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.