| SHA256: | bdbb87d7e54d09144a3949b290a67c409d6dc0e616cc2bb5246f12838f3f99b4 |
| Bestandsnaam: | Knightfall Pack DLC.exe |
| Detectieverhouding: | 0 / 47 |
| Datum van analyse: | 2013-10-24 20:07:54 UTC (3 jaren, 9 maanden geleden) |
| Virusscanner | Resultaat | Versie |
|---|---|---|
| Yandex | 20131024 | |
| AhnLab-V3 | 20131024 | |
| AntiVir | 20131024 | |
| Antiy-AVL | 20131024 | |
| Avast | 20131024 | |
| AVG | 20131024 | |
| Baidu-International | 20131024 | |
| BitDefender | 20090218 | |
| Bkav | 20131024 | |
| ByteHero | 20131024 | |
| CAT-QuickHeal | 20131023 | |
| ClamAV | 20131024 | |
| Commtouch | 20131024 | |
| Comodo | 20131024 | |
| DrWeb | 20131024 | |
| Emsisoft | 20131024 | |
| ESET-NOD32 | 20131024 | |
| F-Prot | 20131024 | |
| F-Secure | 20131024 | |
| Fortinet | 20131024 | |
| GData | 20131024 | |
| Ikarus | 20131024 | |
| Jiangmin | 20131024 | |
| K7AntiVirus | 20131024 | |
| K7GW | 20131024 | |
| Kaspersky | 20131024 | |
| Kingsoft | 20130829 | |
| Malwarebytes | 20131024 | |
| McAfee | 20131024 | |
| McAfee-GW-Edition | 20131024 | |
| Microsoft | 20131024 | |
| eScan | 20131023 | |
| NANO-Antivirus | 20131024 | |
| Norman | 20131024 | |
| nProtect | 20131024 | |
| Panda | 20131024 | |
| Rising | 20131024 | |
| Sophos AV | 20131024 | |
| SUPERAntiSpyware | 20131024 | |
| Symantec | 20131024 | |
| TheHacker | 20131024 | |
| TotalDefense | 20131023 | |
| TrendMicro | 20131024 | |
| TrendMicro-HouseCall | 20131024 | |
| VBA32 | 20131024 | |
| VIPRE | 20131024 | |
| ViRobot | 20131024 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Original name Knightfall Pack DLC.exe
Internal name Knightfall Pack DLC.exe
File version 1.0.0.0
Description Knightfall Pack DLC
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2013-10-24 20:06:10
Entry Point 0x00025E5E
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_ICON 1
RT_GROUP_ICON 1
RT_VERSION 1
RT_MANIFEST 1
Number of PE resources by language
NEUTRAL 4
PE resources
ExifTool file metadata
SubsystemVersion
4.0
InitializedDataSize
19456
ImageVersion
0.0
FileVersionNumber
1.0.0.0
UninitializedDataSize
0
LanguageCode
Neutral
FileFlagsMask
0x003f
CharacterSet
Unicode
LinkerVersion
8.0
FileOS
Win32
MIMEType
application/octet-stream
FileVersion
1.0.0.0
TimeStamp
2013:10:24 21:06:10+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
Knightfall Pack DLC.exe
ProductVersion
1.0.0.0
FileDescription
Knightfall Pack DLC
OSVersion
4.0
OriginalFilename
Knightfall Pack DLC.exe
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CodeSize
147456
FileSubtype
0
ProductVersionNumber
1.0.0.0
EntryPoint
0x25e5e
ObjectFileType
Executable application
AssemblyVersion
1.0.0.0
File identification
MD5 d7ea95dbf30174ec55726ab800a631e7
SHA1 6cecabcfc9c24f809b4d075a449dae539500ef78
SHA256 bdbb87d7e54d09144a3949b290a67c409d6dc0e616cc2bb5246f12838f3f99b4
ssdeep
3072:f8oSm3tbf7FxEZ7SuZuRc2mMKwAP38hLYgK4xgK4xgK4ipZf27J88o:dSm3tbffEZ7gRc2M38hLbuuOpP
Bestandsgrootte
164.0 KB ( 167936 bytes )
Bestandstype Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
| TrID |
Generic CIL Executable (.NET, Mono, etc.) (55.8%) Win64 Executable (generic) (21.0%) Windows Screen Saver (9.9%) Win32 Dynamic Link Library (generic) (5.0%) Win32 Executable (generic) (3.4%) |
Tags
peexe
assembly
VirusTotal metadata
First submission
2013-10-24 20:07:54 UTC (3 jaren, 9 maanden geleden)
Last submission
2013-10-24 20:07:54 UTC (3 jaren, 9 maanden geleden)
| Bestandsnamen |
Knightfall Pack DLC.exe |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
Geen reactie.
Er heeft nog geen VirusTotal-communitylid gereageerd op dit item. Wees de eerste!
U bent niet ingelogd. Alleen geregistreerde gebruikers kunnen reacties plaatsen. Log in en discussieer mee!
Geen stemmen.
Er heeft nog niemand gestemd op dit item. U kunt de eerste zijn!