home

vas_better_gold-1826.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from pnfiles.gamespy.com and multiple other hosts.
MD5:
d68ac04395e612bfa6c822714278d029

SHA-1:
a8af703fcc906a7479d1b7120133d0d4cfd9c669

SHA-256:
46dcbb1a7d52086e4445850de302cc68eb2b2b33d65103ce983d03d582714e27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:50:33 AM UTC  (today)

File size:
415.8 KB (425,732 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\vas_better_gold-1826.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:vEOmLXOaWXBXm3K7XdDvJjDjT1S1ziWkBb:vmr4RmaXdDvJvjTk1ziW+b

Entry address:
0x8544

Entry point:
55, 8B, EC, 81, C4, E8, FE, FF, FF, 33, C0, 89, 85, EC, FE, FF, FF, 89, 85, E8, FE, FF, FF, B8, D4, 84, 40, 00, E8, 77, B3, FF, FF, 33, C0, 55, 68, B8, 86, 40, 00, 64, FF, 30, 64, 89, 20, E8, A0, B4, FF, FF, 33, D2, 52, 50, 8D, 85, F0, FE, FF, FF, E8, A5, B0, FF, FF, 8D, 95, F0, FE, FF, FF, B8, 8C, AF, 40, 00, E8, E5, AA, FF, FF, A1, 8C, AF, 40, 00, E8, F7, AC, FF, FF, 50, 68, C4, 86, 40, 00, E8, 94, B4, FF, FF, E8, 53, B6, FF, FF, 68, 05, 01, 00, 00, 68, 84, AE, 40, 00, 6A, 00, E8, 46, B4, FF, FF, 8B, C8...
 
[+]

Entropy:
7.8802

Developed / compiled with:
Microsoft Visual C++

Code size:
30 KB (30,720 bytes)

The file vas_better_gold-1826.exe has been discovered within the following programs.

Oblivion - Horse Armor Pack  by Bethesda Softworks
Publisher's description - “The Horse Armor Pack is an official plug-in that allows you to outfit any owned horse with a set of armor. The Horse Armor Pack for Oblivion gives you the ability to outfit your favorite horse with a set of stylish armor.”
www.bethsoft.com
8% remove it
Oblivion - Knights of the Nine  by Bethesda Softworks
Publisher's description - “Unlike most of the official plug-ins, this plug-in adds multiple quests. Knights of the Nine is an official plug-in released by Bethesda for Oblivion. A fallen King has been unchained from the darkness of Oblivion to seek vengeance upon the Gods who banished him.”
9% remove it
Oblivion - Mehrunes Razor  by Bethesda Softworks
Publisher's description - “Mehrunes' Razor is an official plug-in that adds a quest to retrieve a powerful dagger. It also adds a nine level dungeon, a new set of armor owned by an assassin, new clothes, new weaponry, new clutter items and a new scripted spell effect which can refine metal ore. ”
10% remove it
Oblivion - Orrery  by Bethesda Softworks
Publisher's description - “The Orrery is an official plug-in that adds a quest to repair the Arcane University's Orrery. The Orrery Pack for Oblivion allows you to help the Mages Guild of Cyrodiil repair the Imperial Orrery, an ancient dwarven machine with mystical properties.”
11% remove it
Oblivion - Spell Tomes  by Bethesda Softworks
Publisher's description - “Spell Tomes is an official plug-in that adds new spells and books from which you can learn spells. Once the plug-in is installed, spell tomes have a chance of randomly being found in most loot chests.”
12% remove it
Oblivion - The Fighter's Stronghold  by Bethesda Softworks
5% remove it
Oblivion - Thieves Den  by Bethesda Softworks
Publisher's description - “The Thieves Den (DLC7) is a plug-in for The Elder Scrolls IV: Oblivion that features a pirate's lost ship and is designed for stealth-based characters.”
3% remove it
Oblivion - Vile Lair  by Bethesda Softworks
Publisher's description - “The Vile Lair (DLC5) is the sixth official plug-in to be released by Bethesda Softworks. This underwater hideout provides your infamous character with safe haven.”
4% remove it
Oblivion - Wizard's Tower  by Bethesda Softworks
10% remove it
 
Powered by Should I Remove It?

The file vas_better_gold-1826.exe has been seen being distributed by the following 2 URLs.

http://pnfiles.gamespy.com/hostedftp/planetelderscrolls/fms/files/oblivionmods/.../VA_BetterGold.exe

http://fs4.nexusmods.com/FS/Libs/Common/.../Downloads?Download&nid=101&fid=1326

Scan vas_better_gold-1826.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.