home

GSUpdate.dll

Geek Squad MRI Toolset

Geek Squad, Inc

Publisher:
Geek Squad  (signed by Geek Squad, Inc)

Product:
Geek Squad MRI Toolset

Description:
MRI Update DLL

Version:
1.1.0.2478

MD5:
b184545cf620e6615f46191e49255d81

SHA-1:
91eb94dae5f1f000fdad62cbcd1b42d7a020614e

SHA-256:
86e58863cfee2546c5737726e0684240a4e97ee3e5565cc9480e350dba26671e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 1:49:45 PM UTC  (today)

File size:
98.7 KB (101,096 bytes)

Product version:
1.1.0.2478

Copyright:
Confidential Trade Secret of ©2004-2016 Best Buy Enterprise Services, Inc. For internal use only.

Original file name:
GSUpdate.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\logmein rescue applet\lmir0001.tmp\toolset\mri\customizer\mri\gsupdate.dll

Digital Signature
Signed by:
Geek Squad, Inc

Authority:
Symantec Corporation

Valid from:
7/10/2016 5:00:00 PM

Valid to:
11/12/2018 3:59:59 PM

Subject:
CN="Geek Squad, Inc", O="Geek Squad, Inc", L=Richfield, S=Minnesota, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
56F79C9CD393268C4E0C2FCA340B20A4

File PE Metadata
Compilation timestamp:
8/11/2016 6:12:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:wTqvCvEYLnw2bFQE+gVrlTh6zxqcNbzTtOP7+xXkXIY77dM23Fjkal3boaF/Ah/z:wmvCvl/Bv9cxpNLtOP7bNBMWjks0aOz

Entry address:
0xC2B7

Entry point:
B8, 1C, 33, 03, 10, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 34, 1E, 4A, 97, 20, 81, 94, 86, 50, 8A, E0, 6A, 05, F0, 48, 17, 98, 56, 3D, 55, A4, 6A, DE, 3A, 42, 81, 1F, E0, 02, E6, E9, 88, 7C, 1A, 76, 5B, 83, F8, 62, CB, B0, 08, B9, 84, 97, 13, 74, 07, 87, 07, EE, 80, 8A, 00, 04, F3, 21, C1, DF, A9, 5A, BA, 01, C5, A9, 7F, 4F, 77, A4, D4, 92, 17, 79, 15, 95, 10, 19, 11, 1E, 6F, 09, 36, F0, 50, 83, FD, BB, 6A, 28, 16, 99, A8, 35...
 
[+]

Entropy:
7.7870

Packer / compiler:
PECompact v2

Code size:
109.5 KB (112,128 bytes)

Scan GSUpdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.