» rerev_demo.exe
Overview
Analysis
File Details

rerev_demo.exe

CAPCOM Co.,Ltd.

File name:

rerev_demo.exe

Publisher:

CAPCOM Co.,Ltd. (signed and verified)

MD5:

106b620a687dd2a2837ee4f8a0529d82

SHA-1:

a1b07030f7211be8f016fef0fe0a73b38b002281

SHA-256:

42080ed529b9da01c5d9a673bac2dfc5bfac86c1effb6fccd7628e8d70029c2f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 5:50:47 PM UTC (today)

File size:

13.9 MB (14,529,368 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\steam\steamapps\common\resident evil revelations demo\rerev_demo.exe

Digital Signature

Signed by:

CAPCOM Co.,Ltd.

Authority:

VeriSign, Inc.

Valid from:

3/25/2013 8:00:00 AM

Valid to:

4/4/2014 7:59:59 AM

Subject:

CN="CAPCOM Co.,Ltd.", OU=Consumer Games Production Management Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="CAPCOM Co.,Ltd.", L=Chuo-ku, S=Osaka, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

093B01ED5D328CC0AF3D5F84A0D3F2AC

File PE Metadata

Compilation timestamp:

5/27/2013 10:51:44 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

196608:510NwpN9VbkBCK6KfrZtnHEKlfT5V/gkSOvfHhF8yZg0n1ecQdsb71QPcOJNW9rs:n0NwlVoBCK1HEidV/gK3Bznqds3w67k

Entry address:

0xDD32EE

Entry point:

53, 51, 52, 56, 57, 55, 8B, EC, 81, EC, 00, 10, 00, 00, C7, 45, 80, EC, 4A, 1D, 01, 8B, 75, 80, B9, C0, 00, 00, 00, 8D, BD, 80, FC, FF, FF, F3, A5, 8D, 85, 80, FC, FF, FF, 89, 85, 74, FC, FF, FF, C7, 85, 44, FC, FF, FF, 0F, AC, 95, A8, 8B, 85, 44, FC, FF, FF, 89, 85, 1C, FC, FF, FF, 8B, 85, 74, FC, FF, FF, 89, 85, 28, FC, FF, FF, B8, 00, 03, 00, 00, C1, E8, 02, 89, 85, 24, FC, FF, FF, 83, BD, 24, FC, FF, FF, 00, 7E, 4E, 8B, 85, 28, FC, FF, FF, 8B, 00, 89, 85, 20, FC, FF, FF, 8B, 85, 28, FC, FF, FF, 8B, 00... 
[+]

Entropy:

7.8885 (probably packed)

Code size:

11.6 MB (12,182,528 bytes)

Scan rerev_demo.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.