» newyorkmysteries_highvoltage_ce.exe
Overview
Analysis
File Details

newyorkmysteries_highvoltage_ce.exe

NewYorkMysteries_HighVoltage

GameHouse

File name:

Publisher:

GameHouse (signed and verified)

Product:

NewYorkMysteries_HighVoltage

Version:

1.0.0.1

MD5:

08599d15537de74e224d038ccb0d67e8

SHA-1:

8a4f100d72e5538bcd95a37dee79bec329e1a70d

SHA-256:

b540f663a1b743f6758c688588395b5562ba15570b78a8d9453e679028ee352b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 5:56:29 PM UTC (today)

File size:

5 MB (5,288,928 bytes)

Product version:

1.0.0.1

File type:

Executable application (Win32 EXE)

Language:

Ryska (Ryssland)

Digital Signature

Signed by:

GameHouse

Authority:

GoDaddy.com, Inc.

Valid from:

8/2/2013 10:30:51 PM

Valid to:

8/2/2016 10:30:51 PM

Subject:

CN=GameHouse, O=GameHouse, L=Seattle, S=Washington, C=US

Issuer:

CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

280CB9FB9E34D6

File PE Metadata

Compilation timestamp:

6/22/2015 2:53:21 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

98304:kAfyo6VVLZ0DASznL0q22czFDGc1bmNOk1kzEpiZqsBsBDIU+XsBDIU+O3qGyld:kAao4Z0DA0wq22kDXbmNOWkYpiTBe8U8

Entry address:

0xD9F088

Entry point:

EB, 02, 23, 04, 89, 25, 04, 90, 1C, 01, EB, 01, D1, EB, 01, E8, EB, 02, F7, 05, 68, C2, F0, 19, 01, EB, 02, FF, 15, EB, 01, B9, EB, 01, BB, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, EB, 02, E9, 7A, E9, 85, 07, 00, 00, 55, EB, 02, 23, 04, EB, 03, 31, D2, A0, EB, 02, F7, 05, EB, 03, 81, CB, E5, 89, E5, EB, 03, 81, F1, 37, 8B, 45, 08, EB, 03, 31, F6, A0, 8B, 00, 3D, 03, 00, 00, 80, 75, 1C, 31, C0, EB, 02, FF, 14, EB, 03, 3B, EB, 07, EB, 02, E8, 3F, EB, F8, 00, 75, 06, 8D, 12, 74, 02, EB, FF, EB... 
[+]

Packer / compiler:

FSG v1.10 (Microsoft Visual C++ 6.0 / 7.0)

Code size:

1.7 MB (1,748,480 bytes)

Scan newyorkmysteries_highvoltage_ce.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.