home

dw_cityofthedaleks.exe

Doctor Who: The Adventure Games

Legacy Interactive

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
British Broadcasting Corp.  (signed by Legacy Interactive)

Product:
Doctor Who: The Adventure Games

Version:
4.0

MD5:
dbb0efeeff952e2b1d175199744a487c

SHA-1:
5b03f0978206318d505b0ff276ebf51e483734f2

SHA-256:
60af70d70434627833004d5a82c7c4c47e1db85ae6c55e0220a2d63d76f17790

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:41:37 PM UTC  (today)

File size:
3.5 MB (3,660,728 bytes)

Product version:
4.0

Copyright:
Copyright © 2010 BBC

Original file name:
DoctorWho_pc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\legacy interactive\doctor who - episode 1 - city of the daleks\dw_cityofthedaleks.exe

Digital Signature
Signed by:
Legacy Interactive

Authority:
COMODO CA Limited

Valid from:
9/18/2011 7:00:00 PM

Valid to:
9/18/2012 6:59:59 PM

Subject:
CN=Legacy Interactive, O=Legacy Interactive, STREET=2684 Lacy St., STREET=Unit 208, L=Los Angeles, S=CA, PostalCode=90031, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
207A9082C9AB311E9D7A6B38539E08AB

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:+37MMqHETdJBDQ1DA8eOHECxEes+WmA+NUTi:+xR8TeOHEC6f4Agx

Entry address:
0x25A4

Entry point:
60, 9C, E9, CD, FF, FF, FF, C3, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 04, 00, FA, 8D, 01, 80, 38, 00, 00, 80, 03, 00, 00, 00, B4, 43, 00, 80, 0E, 00, 00, 00...
 
[+]

Entropy:
7.9618  (probably packed)

Scheduled Task
Task name:
{44282C1E-7122-4482-86EA-23B4026B9175}

Trigger:
Registration (Runs on registration)


Scan dw_cityofthedaleks.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.