» gamaa1b.tmp
Overview
Analysis
File Details

gamaa1b.tmp

GalaxyGate Co., Ltd.

File name:

gamaa1b.tmp

Publisher:

GalaxyGate Co., Ltd. (signed and verified)

Version:

1.09.284.0

MD5:

34e621ffdc0e965a9eeea19647c55b5e

SHA-1:

31c36fc6c5763b3b73e7715ae04e652651e4a3e0

SHA-256:

619642462950f5a103d66448b6c2ebd2b49afbeabe52e80a8d9187b037c796e9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:08:10 PM UTC (today)

File size:

4 MB (4,214,904 bytes)

Product version:

1.09.284.0

Galaxygate Co., Ltd.

Common path:

C:\users\{user}\appdata\local\temp\gamaa1b.tmp

Digital Signature

Signed by:

GalaxyGate Co., Ltd.

Authority:

Thawte, Inc.

Valid from:

11/4/2013 3:00:00 AM

Valid to:

11/5/2014 2:59:59 AM

Subject:

CN="GalaxyGate Co., Ltd.", OU=IT Team, O="GalaxyGate Co., Ltd.", L=Gangnam-gu, S=SEOUL, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

182A37CC256000B4132225032BF410DE

File PE Metadata

Compilation timestamp:

9/22/2014 10:41:49 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:njA1dsWkr7OeuCXXpH51dq/IKN7xRjNMZSInqatmmpag39IgZgGdVsiP5lxuHq0y:jA1dsWMBuCnpZ15Guv18

Entry address:

0x313253

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 07, 03, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, FF, 25, 08, D4, 34, 10, CC, CC, CC, CC, FF, 25, 04, D4, 34, 10, FF, 25, 00, D4, 34, 10, 3B, 0D, 30, A4, 3B, 10, 75, 02, F3, C3, E9, 65, 03, 00, 00, CC, FF, 25, FC, D3, 34, 10, FF, 25, F8, D3, 34, 10, FF, 25, F4, D3, 34, 10, FF, 25, EC, D3, 34, 10, 68, 0D, 33, 31, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 30... 
[+]

Entropy:

6.6641

Code size:

3.3 MB (3,453,952 bytes)

Scan gamaa1b.tmp - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.