» update.exe
Overview
Analysis
File Details

update.exe

GameSite 2000 Ltd

File name:

update.exe

Publisher:

GameSite 2000 (signed by GameSite 2000 Ltd)

Description:

Update Tool for GameSite 2000 products

Version:

4.10.19.148

MD5:

1f405a29c92068267fbb38d5b59308ce

SHA-1:

715a3d3500b77c448c0157eff4452caac1bacb8a

SHA-256:

ebfdf1395fa7c8c853f2a559d38ec48771c58a978c7d8d46279f4420dec61eee

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

4/25/2024 2:46:32 AM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

Trojan.DownLoader12.33691

9.0.1.05190

File size:

1.1 MB (1,121,000 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\gammonsite\update.exe

Digital Signature

Signed by:

GameSite 2000 Ltd

Authority:

The USERTRUST Network

Valid from:

6/2/2011 8:00:00 PM

Valid to:

6/2/2014 7:59:59 PM

Subject:

CN=GameSite 2000 Ltd, O=GameSite 2000 Ltd, STREET=PO Box 80181, L=Canton, S=OH, PostalCode=44708, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0081336448649BAA3F939EE585ACCECF7F

File PE Metadata

Compilation timestamp:

6/21/2011 10:22:05 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:e0l0DN3aqOfrFYXbKCEfAe59WzfEAVa+LMhes+aLbOu0yn3XV/uI88888888888+:e0lYAhmbrmcTEAg+ox+a3FmeWZAYUsS

Entry address:

0x1000

Entry point:

68, 01, F0, 61, 00, E8, 01, 00, 00, 00, C3, C3, 67, C7, 0A, 41, 39, 2C, 95, 72, 9A, BB, 28, B1, D9, 51, 54, 25, B5, 44, 2D, EF, 56, 40, 11, 5A, 66, 22, 53, 95, 23, 88, 07, B4, 08, 25, FB, 5D, FD, 3B, 0C, 94, 15, 5B, 6D, F1, 19, DB, AA, 41, 2D, 3C, BF, CB, A6, 7A, EF, 96, E3, 5E, 48, 9D, 3A, BE, 29, DC, 13, 3E, 63, 28, EE, 54, 1A, A3, 6C, BA, 6D, 1F, C0, 17, 7F, 76, AF, D0, EF, 53, 93, 6F, 01, B5, F2, AF, CE, EE, D2, 51, 69, 13, 74, 2F, 12, CB, 67, B4, 39, 7C, AB, 38, F0, A7, 43, 21, CE, B4, 85, 34, 18, 19... 
[+]

Entropy:

7.2922

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.5 MB (1,590,784 bytes)

Scan update.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.