home

gears.exe

MD5:
914bfab985aee3325418592b3acded7a

SHA-1:
8d6e8254732faaa0c4cd91360123f568e2276cfb

SHA-256:
6b15a63e3f6aee27e3c1dca30fb20da1f3ddee1a868fe940b032d3bb1cee5438

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/18/2024 9:34:05 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Packed.Unknown
17682

File size:
48 KB (49,152 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\gldirect\demos\gears.exe

File PE Metadata
Compilation timestamp:
11/15/2001 7:26:26 AM

OS version:
1.11

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.18

CTPH (ssdeep):
768:H/1kIUHA5vqeadSEOfPtMRjGEn+2ggwizyvIS1jrYB26DuQ9AQgICc1T:f1kIUg56OnORjG9lizyvI0vc26Xgjc1

Entry address:
0x25E8

Entry point:
E9, 73, 05, 00, 00, 03, 10, 40, 00, 57, 41, 54, 43, 4F, 4D, 20, 43, 2F, 43, 2B, 2B, 33, 32, 20, 52, 75, 6E, 2D, 54, 69, 6D, 65, 20, 73, 79, 73, 74, 65, 6D, 2E, 20, 28, 63, 29, 20, 43, 6F, 70, 79, 72, 69, 67, 68, 74, 20, 62, 79, 20, 53, 79, 62, 61, 73, 65, 2C, 20, 49, 6E, 63, 2E, 20, 31, 39, 38, 38, 2D, 32, 30, 30, 30, 2E, 20, 41, 6C, 6C, 20, 72, 69, 67, 68, 74, 73, 20, 72, 65, 73, 65, 72, 76, 65, 64, 2E, 00, 00, 50, 83, EC, 14, DB, 3C, 24, 8B, 44, 24, 08, 25, FF, 7F, 00, 00, 0F, 84, 91, 00, 00, 00, 3D, FF...
 
[+]

Entropy:
6.4044

Packer / compiler:
WATCOM C/C++, 0x32 Run-Time System, 0x1988-1995

Code size:
36 KB (36,864 bytes)

Scan gears.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.