home

snowy.exe

Alawar Entertainment Inc

Publisher:
Alawar Entertainment Inc  (signed and verified)

MD5:
618da53651da47d4336c3c4454fbe646

SHA-1:
13cf14d55c2eb33aeed5d5978b30d310697482a3

SHA-256:
9f34ab6fdc2439a7be7817682a9d1cf163af00a6a459a097fa8157f42d88cca8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:31:33 AM UTC  (today)

File size:
1.6 MB (1,698,136 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\astatix\snowy\snowy.exe

Digital Signature
Signed by:
Alawar Entertainment Inc

Authority:
VeriSign, Inc.

Valid from:
12/22/2008 5:00:00 PM

Valid to:
1/1/2012 4:59:59 PM

Subject:
CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
261442C16C7FA2318392D768A351391F

File PE Metadata
Compilation timestamp:
10/13/2011 6:40:12 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:J6xhDs2yM55uNoOTh3WQ4cu1YMasr117vUcrq1ge0TiUWjqUCqBIuuMStExoUWKq:ODs2nwKnxWfsrDWiekiKUPBIuzSPDsp+

Entry address:
0x1000

Entry point:
68, 01, C0, 68, 00, E8, 01, 00, 00, 00, C3, C3, 33, F7, 59, 06, F4, C5, 80, 71, 2C, BE, 4F, 73, 07, 78, 9C, A3, 5B, E9, 99, C8, 7E, 44, 81, FB, C6, 82, 27, 6B, 4B, 4B, 6B, 0F, 83, 08, 7F, 4E, 52, 97, 23, E3, D1, 41, E0, 54, 98, C6, CF, A4, C0, BE, F9, A6, 8B, 93, AC, D8, 07, 26, 35, 04, 51, 90, E1, 46, 50, 73, 9D, ED, DF, 87, 95, 9B, B2, D7, 79, 18, E9, 2A, 8C, 3C, 0A, D6, B0, E8, FC, CD, C1, BE, 1F, C5, 2C, 4E, 87, C9, 07, 07, 1F, 4E, 53, D2, 93, 9E, 4B, 14, EF, DA, 3C, 5E, DD, D9, 2B, 81, 29, 8F, 96, 7C...
 
[+]

Entropy:
7.9529

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
155.5 KB (159,232 bytes)

Scan snowy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.