» the magicians handbook cursed valley.exe
Overview
Analysis
File Details

the magicians handbook cursed valley.exe

Alawar Entertainment Inc

File name:

Publisher:

Alawar Entertainment Inc (signed and verified)

MD5:

b49305eaf461eb1092bb86dbb694288a

SHA-1:

10afdc35aa56027eaef9558b15d33467d5ed2cba

SHA-256:

9394d1c7128e58db619c5e321483f7f2ee29d58f3b710a73129e73494fb293b8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 7:51:31 PM UTC (today)

File size:

393.9 KB (403,312 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\buka\legkieigrycd3\my games\6604\the magicians handbook cursed valley.exe

Digital Signature

Signed by:

Alawar Entertainment Inc

Authority:

VeriSign, Inc.

Valid from:

12/13/2007 3:00:00 AM

Valid to:

1/2/2009 2:59:59 AM

Subject:

CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

72F3743DF8E423F8F36A6E5C1F8A2153

File PE Metadata

Compilation timestamp:

3/17/2008 1:34:49 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:bNRPmZrx9sY6YJd5NmSf4PZeTU6b7MP+Dd2:bNR+rxyYtJdi2WZeT17MP+h2

Entry address:

0x1000

Entry point:

68, 01, 90, 45, 00, E8, 01, 00, 00, 00, C3, C3, 6C, 81, B2, 96, 34, 67, A3, EF, 96, C5, 1A, 05, B3, 46, 29, 93, 04, C2, 90, 47, 6A, 2F, 47, 23, 88, 12, F6, 3E, 19, 58, 58, 20, 40, 51, A2, A0, F8, 4B, 31, 02, 14, FE, D5, 43, 63, 50, 8B, 11, D3, 4F, A0, 83, 02, 2F, 54, DA, A8, A0, 26, 00, 51, A6, 61, AC, 67, E6, 9B, B1, 38, B4, 89, 74, 54, 2B, 17, ED, B6, 9C, 39, A8, 74, C5, 11, 3C, 13, AA, 13, 19, E7, 8D, AA, A5, 41, 2F, C9, CA, B9, E8, 27, 19, 28, 34, 39, 38, 96, E5, D4, 1A, 70, 58, CB, 6F, 71, 56, 94, A9... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

28 KB (28,672 bytes)

Scan the magicians handbook cursed valley.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.