» GSAMini.exe
Overview
Analysis
File Details
Programs (3)
Downloads (1)

GSAMini.exe

GameStop App

GameStop Inc.

This file is installed with multiple programs including GameStop App and Impulse®. The file has been seen being downloaded from dl.gamestop.com.

File name:

GSAMini.exe

Publisher:

GameStop Corporation (signed by GameStop Inc.)

Product:

GameStop App

Description:

GameStop App updater

Version:

1, 1, 0, 1

MD5:

2ed1fcd0cc42262c230b2c497ff78cc6

SHA-1:

4278ef034f3923d37ec5f415d2aaf8469f28c97d

SHA-256:

67929374f424d22b2be6621a6413c242fd831e32ea11e06d987eb071f8510e88

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/19/2024 11:37:07 AM UTC (today)

Scan engine

Detection

Engine version

Vba32 AntiVirus

suspected of Trojan.Downloader.gen.h

3.12.24.3

File size:

134 KB (137,216 bytes)

Product version:

1, 1, 0, 1

Original file name:

GSAMini.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\{ac1fa872-e696-4d01-a2d5-76d53ed9ba09}\offline\fdfddeff\9ec8b393\gsamini.exe

Digital Signature

Signed by:

GameStop Inc.

Authority:

The USERTRUST Network

Valid from:

2/6/2011 5:00:00 PM

Valid to:

2/6/2014 4:59:59 PM

Subject:

CN=GameStop Inc., O=GameStop Inc., STREET=625 Westport Parkway, L=Grapevine, S=Texas, PostalCode=76051, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

4AE4AD9C6AD3226D5261B010A453ABD3

File PE Metadata

Compilation timestamp:

7/23/2012 2:24:03 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:oxLDoz5b6rZ/+Gp64kCy9P5ag+5CBhfZSio:Qoz5bgOhaFCjo

Entry address:

0x3021

Entry point:

E8, BF, 3B, 00, 00, E9, 17, FE, FF, FF, 8B, C1, 8B, 4C, 24, 04, C7, 00, 4C, A2, 40, 00, 8B, 09, 83, 60, 08, 00, 89, 48, 04, C2, 08, 00, 53, 8B, 5C, 24, 08, 56, 8B, F1, C7, 06, 4C, A2, 40, 00, 8B, 43, 08, 89, 46, 08, 85, C0, 8B, 43, 04, 57, 74, 31, 85, C0, 74, 27, 50, E8, 27, F6, FF, FF, 8B, F8, 47, 57, E8, 5B, F5, FF, FF, 85, C0, 59, 59, 89, 46, 04, 74, 18, FF, 73, 04, 57, 50, E8, F4, 3B, 00, 00, 83, C4, 0C, EB, 09, 83, 66, 04, 00, EB, 03, 89, 46, 04, 5F, 8B, C6, 5E, 5B, C2, 04, 00, 83, 79, 08, 00, C7, 01... 
[+]

Entropy:

6.2111

Code size:

36 KB (36,864 bytes)

The file GSAMini.exe has been discovered within the following programs.

GameStop App by GameStop

This is a video game distributed through the gamestop.com web portal and uses the GameStop downloadable app for distribution, social connection and update management.

www.gamestop.com/gs/landing/pc-game-downloads

25% remove it

Impulse by Stardock Corporation

Impulse is a digital distribution and multiplayer platform. Originally developed by Stardock to succeed Stardock Central, it was purchased by GameStop. Impulse facilitates the purchase, download and updating of software.

www.stardock.com

18% remove it

Impulse® by GameStop

Impulse® is a PC video game distributed through the GameStop App, a free game download and management utility.

10% remove it

The file GSAMini.exe has been seen being distributed by the following URL.

http://dl.gamestop.com/impulse/.../GameStopApp_setup.exe

Scan GSAMini.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.