» shroud of the avatar.exe
Overview
Analysis
File Details

shroud of the avatar.exe

Portalarium, Inc.

File name:

Publisher:

Portalarium, Inc. (signed and verified)

Version:

5.0.2.15786391

MD5:

6ffa90b4f960b3ed7ad3d0e3f8be7599

SHA-1:

51611938b935b4cab2172027c32300f5e2353488

SHA-256:

62fa6389339ea3c53573ae238057a0717b07792bd4adadb4836e2d39109e11e2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 2:36:11 PM UTC (today)

File size:

15.1 MB (15,806,280 bytes)

Product version:

5.0.2.15786391

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\portalarium\shroud of the avatar\win32\shroud of the avatar.exe

Digital Signature

Signed by:

Portalarium, Inc.

Authority:

DigiCert Inc

Valid from:

11/18/2013 7:00:00 PM

Valid to:

1/27/2016 7:00:00 AM

Subject:

CN="Portalarium, Inc.", O="Portalarium, Inc.", L=Austin, S=Texas, C=US

Issuer:

CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0FA3EDB2760062291DDC0CC8A144DAE7

File PE Metadata

Compilation timestamp:

5/19/2015 8:08:35 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

393216:g5E54iwyzEK0BJ1+276f2rjSP57TK8TPaSPUY6QiW+5oKnmOVpvH54GG/0g1c8:CvQiRoKnhfZ4b/91Z

Entry address:

0x5CE9E2

Entry point:

E8, 98, 11, 01, 00, E9, 89, FE, FF, FF, 6A, 14, 68, 40, EF, 17, 01, E8, 58, 1B, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, BE, 35, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, 4E, 1B, 00, 00, C2, 10, 00, 6A, 0C, 68, 60, EF, 17, 01, E8, FA, 1A, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45... 
[+]

Entropy:

6.7853

Code size:

11.8 MB (12,369,920 bytes)

Scan shroud of the avatar.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.