home

warfaceloader.exe

Mail.Ru Games, LLC

Publisher:
Mail.Ru Games, LLC  (signed and verified)

MD5:
0f540343ec02405965744b537cabfff5

SHA-1:
77798c1f603f79aa9a356548f059110f0221bbe1

SHA-256:
722ec21b21a071cd555daafe139fb718427bd49a3a6fa084ed4ff2370209641d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:14:49 PM UTC  (today)

File size:
4.8 MB (5,046,048 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\warfaceloader.exe

Digital Signature
Signed by:
Mail.Ru Games, LLC

Authority:
VeriSign, Inc.

Valid from:
3/3/2014 6:00:00 AM

Valid to:
3/4/2015 5:59:59 AM

Subject:
CN="Mail.Ru Games, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Mail.Ru Games, LLC", L=Moscow, S=Moscow, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
114993ED9CFD68FF7A9D4B6160F60901

File PE Metadata
Compilation timestamp:
11/11/2014 3:21:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:z7i+Zt9WXa0tot+jkNI6FY61zCLWk3Bm2AqxatL6GFsxacg:niMjH+jqFY61zUWk3Bb6LPF4c

Entry address:
0xB3AFE0

Entry point:
00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3A, 30, 1F, 30, 3A, 31, 1F, D8, 3B, 31, 1F, FF, 3A, 30, 1F, FF, 39, 30, 1F, FF, 2F, 26, 16, FF, 34, 2D, 1F, FF, 7B, 78, 71, FF, A6, A4, A4, FF, 93, 90, 90, FF, 7E, 79, 78, FF, 72, 69, 67, FF, 6B, 61, 5E, FF, 6A, 60, 5E, FF, 6A, 60, 5D, FF, 68, 5F, 5C, FF, 67, 5D, 5B, FF, 65, 5C, 5A, FF, 64, 5B, 58, FF, 62, 5A, 57, FF, 61, 58, 56, FF, 5E, 55, 53, FF, 59, 50, 4D, FF, 57, 4E, 4C, FF, 65, 5D, 5A, FF, 84, 7D, 7B, FF, A8, A4, A3, FF, C8, C2, C2, FF...
 
[+]

Code size:
4.7 MB (4,931,584 bytes)

Scan warfaceloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.