home

GameUpdater.exe

GameUpdater.exe

Chengdu Xishanju Interactive Entertainment Co. Ltd

Publisher:
Kingsoft Corporation  (signed by Chengdu Xishanju Interactive Entertainment Co. Ltd)

Product:
GameUpdater.exe

Version:
2, 2, 4,3879

MD5:
c29abd5f4ebf695ca3798e773d495b2e

SHA-1:
390230bd3ee361cf349c4ea0209a33e59ae5870d

SHA-256:
77611ccfe49873bef4e6ac5128fec34e85631bbd4dfcb2be772bb83cee1cf66b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:46:56 AM UTC  (today)

File size:
4.7 MB (4,937,736 bytes)

Product version:
4,0,0,7506

Copyright:
(c) Kingsoft Corporation 2003-2009, All Rights Reserved.

Original file name:
GameUpdater.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, China)

Common path:
C:\Program Files\kingsoft\jx3\bin\zhcn\gameupdater.exe

Digital Signature
Signed by:
Chengdu Xishanju Interactive Entertainment Co. Ltd

Authority:
Symantec Corporation

Valid from:
6/1/2015 7:00:00 AM

Valid to:
7/1/2018 6:59:59 AM

Subject:
CN=Chengdu Xishanju Interactive Entertainment Co. Ltd, O=Chengdu Xishanju Interactive Entertainment Co. Ltd, L=chengdu, S=sichuan, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2FE58F3CD7F5ED8868018874448A9056

File PE Metadata
Compilation timestamp:
1/7/2016 3:46:04 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:jYLOYc1pvekqW51rqMiztrWtFvzKN8ODCkIivkxx2e8IRfoxFo9kvi95RHwtq:8Lgrr0BWtFvzK6UPcLX88fono9kvCv

Entry address:
0x16C852

Entry point:
E8, 0C, 44, 01, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D8, BE, 5F, 00, E8, 38, 0F, 00, 00, E8, 87, A8, 00, 00, 0F, B7, F0, 6A, 02, E8, 9F, 43, 01, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 32, 3F, 01, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.2625

Code size:
1.6 MB (1,699,328 bytes)

The file GameUpdater.exe has been seen being distributed by the following URL.

http://jx3gc.autoupdate.kingsoft.com/jx3gc/zhcn_PakV3/.../gameupdater_2.2.4.3879.exe

Scan GameUpdater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.