» updatefivecores.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

updatefivecores.exe

TrueUpdate Client

JustAdventure, LLC.

It runs as a scheduled task under the Windows Task Scheduler.

File name:

updatefivecores.exe

Publisher:

Indigo Rose Corporation (signed by JustAdventure, LLC.)

Product:

TrueUpdate Client

Version:

3.6.0.0

MD5:

add61a451792fcb118cd4374f32a3377

SHA-1:

2822c362cbd59ae73595ccd48d241127bad32a5a

SHA-256:

032bfb18ddd5067e9c87935e46002620eac5bf092b715cb877e67a15db4a85e2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 2:11:42 AM UTC (today)

File size:

471.6 KB (482,920 bytes)

Product version:

3.6.0.0

Trademarks:

TrueUpdate is a trademark of Indigo Rose Corporation

Original file name:

tu_rt.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

JustAdventure, LLC.

Authority:

GoDaddy.com, Inc.

Valid from:

2/22/2012 12:01:25 AM

Valid to:

2/21/2014 11:52:34 PM

Subject:

CN="JustAdventure, LLC.", O="JustAdventure, LLC.", L=Canton, S=MA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

2B4C5E4CA95ED2

File PE Metadata

Compilation timestamp:

6/19/2012 4:39:00 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:3KWK85XzbMCPOYCwsGgCk7/NH0v+oJCwZuap71sMHM4D5HiCk0bV+Rk9eL7MK4mo:3lj4vDGaDiCchlsYLVIsK4musH+KJJtY

Entry address:

0x133780

Entry point:

60, BE, 00, 70, 4C, 00, 8D, BE, 00, A0, F3, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8604

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

436 KB (446,464 bytes)

Scheduled Task

Task name:

{E9DB6543-66FB-49F8-BB45-9FE0C5A5E88F}

Trigger:

Registration (Runs on registration)

The file updatefivecores.exe has been discovered within the following program.

My Game Long Name by Epic Games, Inc.

If you directly run an Epic game installed with a custom installer, the user needs Administrator access to run the game for the first time. If this occurs, an uninstall entry gets created in Windows Add/Remove Programs with the name 'My Game Long Name'.

About 9% of users remove it

Scan updatefivecores.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.