home

ProxyGate.exe

ProxyGate

GOLD CLICK LIMITED

The application ProxyGate.exe by GOLD CLICK LIMITED has been detected as a potentially unwanted program by 2 anti-malware scanners.
Publisher:
Gold Click Ltd  (signed by GOLD CLICK LIMITED)

Product:
ProxyGate

Version:
2.1.0.1120

MD5:
4abce714241d97e562ffe02bd8e4e552

SHA-1:
2275add4f645b88b74e47ec4fc095d6565c3e792

SHA-256:
679a1d5c23838f683c095d4dad407fec54e97abbbc6e4aa5b78e97d64cf57bdb

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 12:50:19 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.GOLDCLICK (M)
15.7.24.22

VIPRE Antivirus
Threat.5085697
39486

File size:
1.4 MB (1,427,920 bytes)

Product version:
2.1.0.1120

Copyright:
Gold Click Ltd

Original file name:
ProxyGate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\proxygate\proxygate.exe

Digital Signature
Signed by:
GOLD CLICK LIMITED

Authority:
GlobalSign nv-sa

Valid from:
3/27/2015 3:17:01 AM

Valid to:
3/27/2016 3:17:01 AM

Subject:
CN=GOLD CLICK LIMITED, O=GOLD CLICK LIMITED, L=Birmingham, C=GB

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EB61871B3A6BD9AD6F5CED626E0A4574

File PE Metadata
Compilation timestamp:
4/1/2015 4:43:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:h2kNUbV1LHlwe2fWgcRUEg2xADWqeWu88tqpOl+mgqXLv:jNmrFwrWgcRUEg2xADWPWjpOsEXLv

Entry address:
0x10EC

Entry point:
68, DC, 11, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 50, 00, 00, 00, 40, 00, 00, 00, CF, 9A, 5D, 9E, E5, C0, 79, 49, 90, EC, 42, A3, 60, EE, 51, 80, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 72, 6F, 78, 79, 47, 61, 74, 65, 00, 00, 00, 00, 00, 00, 00, 50, 72, 6F, 78, 79, 47, 61, 74, 65, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 03, 00, 90, 74, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 74, 75, 40, 00, 60, C1, 4B, 00...
 
[+]

Entropy:
5.6115

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
744 KB (761,856 bytes)

Remove ProxyGate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.