home

clincrement.exe

ArcadeTwist

The application clincrement.exe by ArcadeTwist has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler named FieCop93 triggered daily at a specified time. This file is typically installed with the program ArcadeTwist by ArcadeTwist.com which is a potentially unwanted software program.
Publisher:
ArcadeTwist  (signed and verified)

Product:
ArcadeTwist

Version:
3.1.4361

MD5:
bed2b728870135d75cb95aa0a68d8785

SHA-1:
89b08f54f79f87510510dae4a2ef6e19a671d3eb

SHA-256:
85f65bb682270c411f7560a96d453d80107ff374cf8c2ceb4f4061d176f9328f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 11:53:20 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.GameVance (M)
16.12.7.0

File size:
459.3 KB (470,328 bytes)

Product version:
3.1.4361

Copyright:
Copyright (C) ArcadeTwist 2015

Original file name:
ArcadeTwist

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\cluttetrigg5\clincrement.exe

Digital Signature
Signed by:
ArcadeTwist

Authority:
thawte, Inc.

Valid from:
1/19/2015 7:00:00 PM

Valid to:
1/19/2017 6:59:59 PM

Subject:
CN=ArcadeTwist, O=ArcadeTwist, L=Irvine, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
285C56079C0C7E91CD8726B42C0AF1B6

File PE Metadata
Compilation timestamp:
8/7/2015 9:11:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x1513A

Entry point:
E8, 1F, 71, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D8, C4, 45, 00, E8, 10, 07, 00, 00, E8, EC, 72, 00, 00, 0F, B7, F0, 6A, 02, E8, 51, 66, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 77, 0D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.4241

Code size:
305.5 KB (312,832 bytes)

Scheduled Task
Task name:
FieCop93

Trigger:
Daily (Runs daily at 9:12 PM)


The file clincrement.exe has been discovered within the following program.

ArcadeTwist  by ArcadeTwist.com
Gaming software that displays advertisements. Per the EULA: "BY DOWNLOADING THE SOFTWARE TO PLAY PREMIUM GAMES, YOU SIGNIFY YOUR AGREEMENT TO THESE TERMS AND CONDITIONS, INCLUDING OUR USE OF YOUR INFORMATION AS PROVIDED IN THE ARCADETWIST PRIVACY POLICY.
www.arcadetwist.com
About 59% of users remove it
 
Powered by Should I Remove It?

Remove clincrement.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.