home

zula.exe

MB Oyun Yazilim ve Pazarlama A.S

Publisher:
MB Oyun Yazilim ve Pazarlama A.S  (signed and verified)

MD5:
cf6182121a6a91dce8507055af53d23f

SHA-1:
82b5d63fdebb3eea7852bc12e40a1d1cdcbc5181

SHA-256:
f64885b0326ba85222f5b4bd046c0c69ad64786742c0c93ab8e3cc791390aea1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:44:50 PM UTC  (today)

File size:
6.6 MB (6,948,160 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\game\zula.exe

Digital Signature
Signed by:
MB Oyun Yazilim ve Pazarlama A.S

Authority:
COMODO CA Limited

Valid from:
7/8/2014 9:00:00 PM

Valid to:
7/8/2016 8:59:59 PM

Subject:
CN=MB Oyun Yazilim ve Pazarlama A.S, O=MB Oyun Yazilim ve Pazarlama A.S, STREET=NO: 103/8 CUMHURIYET MAH. HALASKARGAZI CAD, L=Istanbul, S=Sisli, PostalCode=34400, C=TR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1E700F3F4D26FE3BCBA64C1A65A1E99B

File PE Metadata
Compilation timestamp:
6/11/2010 9:53:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:CUXaE5ek9qAW8zGufJSci+bktY1/QfJOGzE9Pc:C/k9qA/yJ+bk61/QhOGc

Entry address:
0x12C9

Entry point:
C3, C3, C3, C3, C3, C3, C3, C3, C1, 95, F5, 00, 00, FF, 11, 00, F1, 53, 7C, 91, 24, 81, 6D, 73, D1, 04, 05, C4, 0B, E3, 15, 51, AF, 71, 31, D1, 04, 43, 27, 7C, 24, 08, E3, B9, F9, FE, AB, 7A, 45, 2C, B0, F5, AC, 8B, 69, C2, DA, FC, 8F, 29, 9A, AD, 4F, B7, E2, 0B, 45, 22, 13, ED, 34, 3C, 52, F6, F4, 55, 5B, 2A, 52, 65, D2, FA, 02, F3, 81, EE, B1, 82, CD, 80, 50, 98, CD, EE, F8, CB, 96, 91, 11, 51, 01, 46, A8, C7, FE, 8D, 53, FB, F2, 47, A5, D6, 6B, 00, E6, 98, 77, C5, 09, F2, 92, 2B, 90, 37, 87, 62, A4, 7F...
 
[+]

Code size:
28 KB (28,672 bytes)

Scan zula.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.