home

C9.exe

Continent of The Ninth

WEBZEN Inc.

Publisher:
Webzen  (signed by WEBZEN Inc.)

Product:
Continent of The Ninth

Version:
2, 0, 0, 0

MD5:
72cf2aff805e38a5c626baf060449d4d

SHA-1:
4c67060134c21f31b3bcad9b33636c6c3422f944

SHA-256:
4501fdb77ffcc4f021375ce3806ab63c9e0b5eb65874930bc960ec6a7f99b289

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 10:13:44 AM UTC  (today)

File size:
12 MB (12,543,328 bytes)

Product version:
2, 0, 0, 0

Copyright:
Copyright (C) Webzen 2008

Original file name:
C9.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\c9.exe

Digital Signature
Signed by:
WEBZEN Inc.

Authority:
COMODO CA Limited

Valid from:
11/15/2016 9:00:00 AM

Valid to:
11/16/2017 8:59:59 AM

Subject:
CN=WEBZEN Inc., O=WEBZEN Inc., STREET="242, Pangyo-ro, Bundang-gu", L=Seongnam-si, S=Gyeonggi-do, PostalCode=463400, C=KR

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0FA72E33CC7C91FC5C8324B2185AE476

File PE Metadata
Compilation timestamp:
2/24/2017 12:20:11 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x664A7F

Entry point:
E9, FF, 60, FF, FF, C8, C8, 4B, AF, 24, CC, BE, 41, 78, 44, 84, EE, 82, B5, 8D, 7C, 66, 15, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 18, D1, D9, 67, 5D, 64, 1A, CF, F1, 49, E6, 49, 6A, 3B, 91, 2D, 61, CA, 73, 40, 41, B0, 23, BA, 07, 20, F9, 62, E5, 0B, 0D, 27, D5, D6, A5, D7, D9, 00, AA, A4, 8C, 6F, 47, E9, D8, FC, 54, 6D, 11, 13, E8, E3, 2F, F2, 7B, BD, 0B, 13, E6, 9D, BF, C9, 89, 69, 75, 51, 05, 0E, 06, 02, 8F, 2D, 82, 5A, 63, E6, 99, 5B, 9F, 72, A0, 89, 96, 95, B9, 36, 9E, CF, 08, 35, BA, E5, E5, 28, 5D...
 
[+]

Entropy:
7.8878

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
18 MB (18,925,056 bytes)

Windows Firewall Allowed Program
Name:
c9


Scan C9.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.