home

setup_en_demo_darkarcana_thecarnival.exe

Dark Arcana - The Carnival Demo

Artifex Mundi sp. z o.o.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from files.artifexmundi.com.
Publisher:
Artifex Mundi sp. z o.o.

Product:
Dark Arcana - The Carnival Demo

MD5:
2857d52bab99d6f560239b74351b7af0

SHA-1:
b03aeb4fe3e628f43c29cf857dd82e46b413dbec

SHA-256:
4e21e468bee75c1647ab6122bd284e865686eb653d82c7c92af2f1b48bc3872e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 3:05:20 AM UTC  (today)

File size:
27.4 MB (28,760,302 bytes)

Product version:
1.0

Copyright:
Artifex Mundi sp. z o.o.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup_en_demo_darkarcana_thecarnival.exe

File PE Metadata
Compilation timestamp:
7/9/2012 3:41:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:j7AO+57++y04tWuaZxXRzxulZ0NIpR5kH+Vlpm8nD9feI3JZ:j7e7g04tWRZxhFkZSI75kH+VrnDp5Z

Entry address:
0x16478

Entry point:
8A, EC, 3A, D0, 72, 05, 0F, B7, D6, 88, E8, 84, C0, 0F, BE, CE, 0F, B7, D2, FE, CE, 81, DE, 41, 70, 55, 7C, 8D, 1D, 64, 11, F2, 0A, 21, EE, E8, 00, 00, 00, 00, 5A, 3B, E8, C7, C0, DC, EB, 64, A0, 35, BC, 28, 60, E2, 0F, AF, FB, 8D, 2D, 95, 8C, F7, D0, FF, C0, 8D, 05, D0, 97, 80, DA, 81, FB, B3, 5C, 00, 00, 76, 0A, 87, D9, F7, C5, 2C, 1A, CE, 04, 1B, C2, 03, FE, 8D, 05, 66, 6E, BE, 8C, 80, F7, BD, 8A, DB, B5, EF, 03, FA, 56, 88, C5, 33, DB, FE, CD, B0, 65, F7, C5, 94, 4A, 77, B1, 85, F6, 81, C5, F7, E1, 4E...
 
[+]

Entropy:
7.9960  (probably packed)

Code size:
84 KB (86,016 bytes)

The file setup_en_demo_darkarcana_thecarnival.exe has been seen being distributed by the following URL.

http://files.artifexmundi.com/SETUP_EN_DEMO_DarkArcana_TheCarnival.exe

Scan setup_en_demo_darkarcana_thecarnival.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.