home

updater.exe

ArcadeTwist

The application updater.exe by ArcadeTwist has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. This file is typically installed with the program ArcadeTwist by ArcadeTwist.com which is a potentially unwanted software program.
Publisher:
ArcadeTwist  (signed and verified)

Product:
ArcadeTwist

Version:
1.0.1.1

MD5:
e44bf371845bc7dec6224cc867255dd5

SHA-1:
499d33caf86af99e1d926bbe7f50bc1e68085529

SHA-256:
1b0fcf1a3cc7e0058d93dce9ad2db789afdae5d156a03418a89275aef0b31485

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/23/2024 11:28:24 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.GameVance (M)
16.8.25.18

File size:
207.8 KB (212,792 bytes)

Product version:
1.0.1.1

Copyright:
Copyright (C) ArcadeTwist 2015

Original file name:
ArcadeTwist

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\arcadetwist\updater.exe

Digital Signature
Signed by:
ArcadeTwist

Authority:
thawte, Inc.

Valid from:
1/19/2015 7:00:00 PM

Valid to:
1/19/2017 6:59:59 PM

Subject:
CN=ArcadeTwist, O=ArcadeTwist, L=Irvine, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
285C56079C0C7E91CD8726B42C0AF1B6

File PE Metadata
Compilation timestamp:
3/6/2015 9:43:39 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:bCqJmDSVhsHLNwwAD3wwwvRrsuPOmcyMxBgl+voM2Lw0hcnkvsWjcdf+AU+es+oI:bCLD0zwTvRZ+BHkQf+t+l46Jo/X3tz

Entry address:
0x7C51

Entry point:
E8, B2, 3C, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 10, 56, 42, 00, E8, 19, 07, 00, 00, E8, 7F, 3E, 00, 00, 0F, B7, F0, 6A, 02, E8, 45, 3C, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 10, 0E, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
5.8858

Code size:
112.5 KB (115,200 bytes)

Scheduled Task
Task name:
ArcadeTwist Updater

Trigger:
Daily (Runs daily at 3:42 PM)


The file updater.exe has been discovered within the following program.

ArcadeTwist  by ArcadeTwist.com
Gaming software that displays advertisements. Per the EULA: "BY DOWNLOADING THE SOFTWARE TO PLAY PREMIUM GAMES, YOU SIGNIFY YOUR AGREEMENT TO THESE TERMS AND CONDITIONS, INCLUDING OUR USE OF YOUR INFORMATION AS PROVIDED IN THE ARCADETWIST PRIVACY POLICY.
www.arcadetwist.com
About 59% of users remove it
 
Powered by Should I Remove It?

Remove updater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.