» magicball3.exe
Overview
Analysis
File Details

magicball3.exe

Alawar Entertainment Inc

File name:

magicball3.exe

Publisher:

Alawar Entertainment Inc (signed and verified)

MD5:

82882db564cdc6b47c0dadd7114842d4

SHA-1:

a3120421a1a1c050601d4d9b270ec7a62f0e9f16

SHA-256:

cd2d5204494976f143fea04818e2a1a6d0fcc23d11d911563c34c5623f713d55

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/12/2025 12:37:18 AM UTC (today)

File size:

576.3 KB (590,144 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\games.mail.ru\волшебный шар iii\magicball3.exe

Digital Signature

Signed by:

Alawar Entertainment Inc

Authority:

VeriSign, Inc.

Valid from:

12/13/2007 6:00:00 AM

Valid to:

1/2/2009 5:59:59 AM

Subject:

CN=Alawar Entertainment Inc, OU=-, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alawar Entertainment Inc, L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

72F3743DF8E423F8F36A6E5C1F8A2153

File PE Metadata

Compilation timestamp:

9/2/2008 4:51:03 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x1000

Entry point:

68, 01, 70, 48, 00, E8, 01, 00, 00, 00, C3, C3, EC, 83, 63, C2, B3, 72, 96, C8, 6F, 20, 05, 97, BD, 12, 65, 2C, A7, 2F, 0B, 92, 7E, 7B, 8B, FB, CE, 69, 0B, A0, F7, 1F, 95, DE, F0, 54, 0B, A3, 52, 04, 5B, D7, AB, C1, 15, 6E, 23, FB, 8E, A0, 86, 25, E9, CB, 9F, AD, 0A, 26, 4C, A5, 59, 71, A6, 92, F5, 54, AD, 09, 73, D6, 66, E8, 8E, BB, 87, 27, F9, C4, 99, D4, BF, A9, 4E, 79, 5D, 16, 7F, BD, 97, 3B, EB, F2, FD, 16, 01, 80, 3A, 43, 59, 4A, 7A, A0, D9, 62, 68, DF, AD, 1C, 01, B5, 35, 7A, 13, 8A, 85, 20, 54, 70... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

25 KB (25,600 bytes)

Scan magicball3.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.