» getgames_strongholdkingdoms.exe
Overview
Analysis
File Details

getgames_strongholdkingdoms.exe

Bootstrap

Mastertronic Group Ltd.

File name:

Publisher:

Mastertronic (signed by Mastertronic Group Ltd.)

Product:

Bootstrap

Description:

Web Bootstrapper

Version:

5.00.76

MD5:

bfd8d310af60b632272677d62680632f

SHA-1:

c74c64f75eb724febf135ebc1a9576130da3a5ad

SHA-256:

c63443a8edfa1033c42483c3070305a79c7531a7405c1e2dee65d040e751b7d6

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/27/2024 8:51:34 PM UTC (today)

Scan engine

Detection

Engine version

AVG

unknown virus Win32/DH

2016.0.3120

File size:

2.4 MB (2,539,440 bytes)

Product version:

5.00.76

Original file name:

BOOTSTRAP.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\downloads\getgames_strongholdkingdoms.exe

Digital Signature

Signed by:

Mastertronic Group Ltd.

Authority:

VeriSign, Inc.

Valid from:

12/15/2010 4:00:00 PM

Valid to:

1/23/2012 3:59:59 PM

Subject:

CN=Mastertronic Group Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mastertronic Group Ltd., L=Huntingdon, S=Cambridgeshire, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

02D3AA2001BE76D5EC921FCC54296391

File PE Metadata

Compilation timestamp:

10/19/2029 10:28:58 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:yL7K5AUhEg3LrwlOuXT3pPQ3KLpCvkB0EMYkB06nQkB09o:yL7rUX3Qp2KYvkBkxnQkWo

Entry address:

0x1000

Entry point:

A1, 0F, B2, 45, 00, C1, E0, 02, A3, 13, B2, 45, 00, 57, 51, 33, C0, BF, E8, D4, 4C, 00, B9, 2C, 13, 4D, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 6A, 00, E8, 4F, 4F, 04, 00, 59, 68, D8, B1, 45, 00, 6A, 00, E8, 8A, 94, 05, 00, A3, 17, B2, 45, 00, 6A, 00, E9, 06, 20, 05, 00, E9, 54, 4F, 04, 00, 33, C0, A0, 04, B2, 45, 00, C3, A1, 17, B2, 45, 00, C3, CC, B9, AC, 00, 00, 00, 0B, C9, 74, 39, 83, 3D, 0F, B2, 45, 00, 00, 73, 0A, B8, E2, 00, 00, 00, E8, E3, FF, FF, FF, 68, AC, 00, 00, 00, 6A, 40, E8, D2, 94... 
[+]

Entropy:

5.9480

Code size:

360 KB (368,640 bytes)

Scan getgames_strongholdkingdoms.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.