update.exe

Framework

This is a setup program which is used to install the application. The file has been seen being downloaded from ni518026_1.vweb11.nitrado.net.
Product:
Framework

Description:
Pseudo D3D

Version:
4.0.4.6

MD5:
6a1a91f707c49f40a0683e474dd3d039

SHA-1:
54b1af6261e4e60354583da749bff7d585f37952

SHA-256:
8f5b39457e2836a747f80009aae739cb5347fc4154e0a76028d3a4a4ed043d7b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/23/2025 11:30:07 AM UTC  (today)

File size:
1 MB (1,062,912 bytes)

Product version:
4.0.4.6

Copyright:
Pseudo D3D © 2015

Original file name:
Pseudo D3D.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\update.exe

File PE Metadata
Compilation timestamp:
11/15/2015 1:36:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:uK5qCE4iDiTzz/Hk1dzFAFN5oPr59gW56XrTzzz:nE4iWTv/CkVTv

Entry address:
0xD652E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
849.5 KB (869,888 bytes)

The file update.exe has been seen being distributed by the following URL.

Scan update.exe - Powered by Reason Core Security