home

magicball3.exe

Alawar Entertainment Inc

Publisher:
Alawar Entertainment Inc  (signed and verified)

MD5:
82882db564cdc6b47c0dadd7114842d4

SHA-1:
a3120421a1a1c050601d4d9b270ec7a62f0e9f16

SHA-256:
cd2d5204494976f143fea04818e2a1a6d0fcc23d11d911563c34c5623f713d55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:25:12 AM UTC  (today)

File size:
576.3 KB (590,144 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\games.mail.ru\волшебный шар iii\magicball3.exe

Digital Signature
Signed by:
Alawar Entertainment Inc

Authority:
VeriSign, Inc.

Valid from:
12/13/2007 6:00:00 AM

Valid to:
1/2/2009 5:59:59 AM

Subject:
CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
72F3743DF8E423F8F36A6E5C1F8A2153

File PE Metadata
Compilation timestamp:
9/2/2008 4:51:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1000

Entry point:
68, 01, 70, 48, 00, E8, 01, 00, 00, 00, C3, C3, EC, 83, 63, C2, B3, 72, 96, C8, 6F, 20, 05, 97, BD, 12, 65, 2C, A7, 2F, 0B, 92, 7E, 7B, 8B, FB, CE, 69, 0B, A0, F7, 1F, 95, DE, F0, 54, 0B, A3, 52, 04, 5B, D7, AB, C1, 15, 6E, 23, FB, 8E, A0, 86, 25, E9, CB, 9F, AD, 0A, 26, 4C, A5, 59, 71, A6, 92, F5, 54, AD, 09, 73, D6, 66, E8, 8E, BB, 87, 27, F9, C4, 99, D4, BF, A9, 4E, 79, 5D, 16, 7F, BD, 97, 3B, EB, F2, FD, 16, 01, 80, 3A, 43, 59, 4A, 7A, A0, D9, 62, 68, DF, AD, 1C, 01, B5, 35, 7A, 13, 8A, 85, 20, 54, 70...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
25 KB (25,600 bytes)

Scan magicball3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.