home

gamefire.exe

Game Fire

Ahmed Osama

This is a self-extracting archive and installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Smart PC Utilities  (signed by Ahmed Osama)

Product:
Game Fire

Description:
Game Fire Setup

Version:
5.1.1090.0

MD5:
5f0dc649a0e74f4f55c424d11b274c6c

SHA-1:
6a0df4d8d342314dd4005f38ae018195ae91b148

SHA-256:
a055913dda8e2c4105d3a444fef650fcd90c44901f4cee4f84ac9fd19a55c758

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 3:44:41 AM UTC  (today)

File size:
7.6 MB (7,953,032 bytes)

Product version:
5.1.1090.0

Copyright:
(C) 2016 Smart PC Utilities, Ltd. All rights reserved.

Original file name:
gamefire.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\gamefire.exe

Digital Signature
Signed by:
Ahmed Osama

Authority:
StartCom Ltd.

Valid from:
5/10/2016 7:27:48 AM

Valid to:
5/10/2018 7:27:48 AM

Subject:
CN=Ahmed Osama, O=Ahmed Osama, L=Al Minya, S=Al Minya, C=EG

Issuer:
CN=StartCom Class 2 Object CA, OU=StartCom Certification Authority, O=StartCom Ltd., C=IL

Serial number:
1C4D86749464035078BE89B18610F3AF

File PE Metadata
Compilation timestamp:
2/8/2016 10:36:53 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
196608:WbtU/FvUxxouYJpNnjFhmmq1/L3gI92jX5oc7Gv6snkMyw:W0vuouYvpfJRI922c7G5Vyw

Entry address:
0x31E0F

Entry point:
E8, 9F, 05, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, F6, 45, 08, 01, 56, 8B, F1, C7, 06, B0, A5, 44, 00, 74, 0A, 6A, 0C, 56, E8, 5A, FB, FF, FF, 59, 59, 8B, C6, 5E, 5D, C2, 04, 00, CC, CC, CC, CC, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 0F, 03, C1, 1B, C9, 0B, C1, 59, E9, CA, 06, 00, 00, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 07, 03, C1, 1B, C9, 0B, C1, 59, E9, B4, 06, 00, 00, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 53, 56, 6A, 17, E8, 40, 6F, 01, 00, 85, C0, 74, 05, 8B, 4D, 08, CD, 29, 33, F6, 8D, 85, DC, FC, FF, FF...
 
[+]

Entropy:
7.9419  (probably packed)

Code size:
292 KB (299,008 bytes)

The file gamefire.exe has been seen being distributed by the following 12 URLs.

http://dw.uptodown.com/dwn/XTWhyOpIX7MJB0nLKzs2zI7dXHDkvPZwCcCuKzZIUwl0JGjL2MmuHKY5XaUG-J6071lRkWpvSX4r7PKRnWhspKx8hL3vzrqFIaOSOrUWwjMlHruANshCx6nPJK2sPmk9/t4Tu_oIiibk2XgQ3FO3ktBhH2qGTjjJ0qgzXy2FnrBrWSOx7H9zNDAkpF5Wp8CSDp4owKEzyok7HxECNhy9vd_fcBtqdvrOWHeheo6uCZ6yPE-83jxRpQ53A-HmrQtef/QGPg1vzp0vNtFPZHZQNxQi1nLTQOprneuJFe5Q0G2z8CAF2Rw4OFh_LuVtMEHHzHxyFfT69wi809V5ZH42OXdXEB_tmEA5B9qTL9lU7cqAnjBCEmB8Nh5JgHiTnC-r2b/.../

https://dw.uptodown.com/dwn/3ZIDqiRUucjv6vtZHEvwgZ_C5nukvuaz9oNmDod3e95JZIa237RIqDOwv3Xv6dG7ZVQrnnDIENJgJVp9T_iR7UqpYY7KpzCRs5rYgJmKJbYhEJdPkCHv0ovW9adBsD-f/gk_X8VWhp_Ep3T3rfIbboKhecMmbeGugTOW78tz2ufYFjlpGIXeX820NiMhv_LLmd_aNgF7mGQ6KRdv2jDz0HLGnXgxDnGK1N1z1euXnvqgspekSsIQulHLgdPSnKqjf/.../

https://www.smartpcutilities.com/.../download.html?id=7921

http://game-fire.software.informer.com/.../

http://migre.me/qnfmS

http://a.tuviviet.net/v2106xm/6/.../game-fire-511090.exe

http://game-fire.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMCwgnP4SN6ceDryJz7PbJv3FQNYWEuR8Z8QB0MlMcx9zn2e5AEem7MGqCUDcpUY0Y79eaV3cpvmSFQ6/.../LsYeMlXYF5CsdgEdDM888o0zofdsOdWDzu5MUVfd9ds=

http://game-fire.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvTH4EHzP0daucGfNi4 hWQ10G63 WtaA/WXUEVOrWyG5wOv0QNyB82vTFZZhXqPEisv9YLCNkO/216XxoYLpJ9JI/.../eew=

http://game-fire.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuMAYGg202ukXToZcfA7pShq1Uc/9Qt4Tp0dDMO8WnqQEXqAJ8WueBW5xh/vSxlODF4zwNwW2kwGWlWOhWw7mHo0/.../Gw79JtMphIiKKg6Je4IRpQc=

http://gsf-cf.softonic.com/6a0/df4/.../gamefire.exe

https://www.smartpcutilities.com/.../gamefire.exe

http://game-fire.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPfKtnB1uXSupsCcTiN8syf7rYPShcHHE/1hqVlQuIH5EzQTYvDjvQKSUvuIlWYB2d2prLwgO/.../IFEiTh4=

Scan gamefire.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.