» update.exe
Overview
Analysis
File Details

update.exe

GameSite 2000 Ltd

File name:

update.exe

Publisher:

GameSite 2000 (signed by GameSite 2000 Ltd)

Description:

Update Tool for GameSite 2000 products

Version:

4.3.18.129

MD5:

0eb8fed559fe7d3e46f745177f61fb9f

SHA-1:

cd9d958874a4bbae25e93a4d84cf481e8de746a2

SHA-256:

9b88734c123aa938e452a037aeb54f7583dd720a77525c1ab23c4d35ef5c139d

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

5/2/2024 12:10:14 PM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/170.3

Quick Heal

(Suspicious) - DNAScan

1.16.10.00

File size:

841.7 KB (861,920 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\extreme gammon\update.exe

Digital Signature

Signed by:

GameSite 2000 Ltd

Authority:

The USERTRUST Network

Valid from:

6/15/2009 7:00:00 AM

Valid to:

6/16/2011 6:59:59 AM

Subject:

CN=GameSite 2000 Ltd, O=GameSite 2000 Ltd, POBox=80181, STREET=PO BOX 80181, L=Canton, S=OH, PostalCode=44708, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

4B4B9B39C86A440375EB01AE21DBA4A5

File PE Metadata

Compilation timestamp:

3/17/2010 7:28:26 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:ZCqcBcgS4jh4NjgHCKo4nDlu48JDQNabOu0yn3XV/ug8W1K3Dns4NK+17:MqATjVY+pZ58ZQNna3FmvW4Ds4NK+17

Entry address:

0x1000

Entry point:

68, 01, 20, 54, 00, E8, 01, 00, 00, 00, C3, C3, 85, FA, D9, 64, 5B, 18, 1B, F1, 56, 85, 6E, 6C, 5B, 73, B0, AD, B6, F9, 86, 6D, 74, 90, D7, BA, 09, 8B, CB, 64, B9, 06, FE, 00, 2B, 06, 82, F1, 72, 63, 4C, E8, C8, B6, 58, B1, B9, 88, 69, CA, 54, 29, 42, F6, B1, 94, D8, 32, 7D, D0, 5B, 51, 5B, 3C, AC, EC, 50, B6, 10, 8C, 35, 26, 86, 5C, 9F, 27, 67, B3, 6B, 2D, 72, F7, 37, 1F, 6F, 5E, 09, 57, 41, 5D, 96, D2, 26, AB, F5, 62, 43, EC, 1E, 49, B0, 3B, 5E, 85, 71, 01, 10, 9D, 13, BA, 3E, 09, 13, EF, A4, 69, 65, 01... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

809.5 KB (828,928 bytes)

Scan update.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.