home

winter.osr

Gamefactory Inc.

Publisher:
Gamefactory Inc.  (signed and verified)

MD5:
69a7818e57c8b7169f2f0e64195cf71e

SHA-1:
610caead68ab76606679d1d62d7f0a058fbfcdfd

SHA-256:
a39a87386a2f105110b3018fe1d39820f6bfa5894bea289fdb51245fad04bfa7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/3/2024 12:26:31 AM UTC  (today)

File size:
437.6 KB (448,120 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\winter.osr

Digital Signature
Signed by:
Gamefactory Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
11/25/2014 2:20:24 PM

Valid to:
11/25/2017 2:20:24 PM

Subject:
CN=Gamefactory Inc., O=Gamefactory Inc., L=New Westminster, S=British Columbia, C=CA

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4B629A0CC6221F

File PE Metadata
Compilation timestamp:
3/14/2016 4:21:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ZG4cI0dI0BSDaqs+3GpvAFvHAQn888888888888W88888888888r:p0dI0BSD73IAFvHR

Entry address:
0x49838

Entry point:
55, 8B, EC, 83, C4, C0, B8, 34, 5C, 44, 00, E8, 60, 02, FC, FF, E8, B3, C4, FB, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8111

Developed / compiled with:
Microsoft Visual C++

Code size:
287 KB (293,888 bytes)

Scan winter.osr - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.