home

gate64.exe

Security Stronghold LLC

The application gate64.exe by Security Stronghold has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Security Stronghold LLC  (signed and verified)

MD5:
c91c136a8f2f7ddae2953b1823d9507f

SHA-1:
4bce450157ddbc95af9d91ce63184e0e84ba3bcb

SHA-256:
894091b7d14182816c5de00420d1a8ffc23055bfe7357794c3a4f77aa46da249

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 10:29:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win64.Generic
16.3.22.10

File size:
73.7 KB (75,448 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\stronghold antimalware\gate64.exe

Digital Signature
Signed by:
Security Stronghold LLC

Authority:
GlobalSign nv-sa

Valid from:
10/21/2015 5:02:48 PM

Valid to:
2/10/2017 1:49:56 PM

Subject:
E=manager@securitystronghold.com, CN=Security Stronghold LLC, O=Security Stronghold LLC, L=Astrakhan, S=Astrakhan Oblast, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121DAA68066FB83F8591C05E61A0A74B0BA

File PE Metadata
Compilation timestamp:
3/6/2015 2:34:07 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
1536:p0C6QiH+vnR/TCghrxY/cp1UxzyprGsHxdt3XBuX:pHtjnR/TCg/eG1YXsN3XB4

Entry address:
0x23A4

Entry point:
48, 83, EC, 28, E8, E3, 38, 00, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, 48, 8B, C4, 48, 89, 58, 10, 48, 89, 68, 18, 48, 89, 70, 20, 89, 48, 08, 57, 48, 83, EC, 20, 48, 8B, CA, 48, 8B, DA, E8, DA, 43, 00, 00, 8B, 4B, 18, 48, 63, F0, F6, C1, 82, 75, 17, E8, 62, 04, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4B, 18, 20, 83, C8, FF, E9, 34, 01, 00, 00, F6, C1, 40, 74, 0D, E8, 46, 04, 00, 00, C7, 00, 22, 00, 00, 00, EB, E2, 33, FF, F6, C1, 01, 74, 19, 89, 7B, 08, F6, C1, 10, 0F, 84, 89, 00, 00, 00, 48, 8B, 43...
 
[+]

Code size:
41 KB (41,984 bytes)

Remove gate64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.