home

updater.exe

ArcadeTwist

The application updater.exe by ArcadeTwist has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. This file is typically installed with the program ArcadeTwist by ArcadeTwist.com which is a potentially unwanted software program.
Publisher:
ArcadeTwist  (signed and verified)

Product:
ArcadeTwist

Version:
2.3.3757

MD5:
118bc0baf144facf810d25ea339f66eb

SHA-1:
671f140c94f8eb799fd244d944e11fb0aa799b60

SHA-256:
89860b68823035ff7291444ac1049ee509d81de3154fca74519b62460569819c

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/24/2024 12:06:33 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.GameVance (M)
17.2.22.9

File size:
351.8 KB (360,248 bytes)

Product version:
2.3.3757

Copyright:
Copyright (C) ArcadeTwist 2015

Original file name:
ArcadeTwist

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\arcadetwist\updater.exe

Digital Signature
Signed by:
ArcadeTwist

Authority:
thawte, Inc.

Valid from:
1/19/2015 6:00:00 PM

Valid to:
1/19/2017 5:59:59 PM

Subject:
CN=ArcadeTwist, O=ArcadeTwist, L=Irvine, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
285C56079C0C7E91CD8726B42C0AF1B6

File PE Metadata
Compilation timestamp:
4/3/2015 2:17:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0xA881

Entry point:
E8, 54, 45, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, E8, 62, 44, 00, E8, 19, 07, 00, 00, E8, 21, 47, 00, 00, 0F, B7, F0, 6A, 02, E8, E7, 44, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 80, 0D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.3339

Code size:
239.5 KB (245,248 bytes)

Scheduled Task
Task name:
ArcadeTwist Updater

Trigger:
Daily (Runs daily at 3:40 AM)


The file updater.exe has been discovered within the following program.

ArcadeTwist  by ArcadeTwist.com
Gaming software that displays advertisements. Per the EULA: "BY DOWNLOADING THE SOFTWARE TO PLAY PREMIUM GAMES, YOU SIGNIFY YOUR AGREEMENT TO THESE TERMS AND CONDITIONS, INCLUDING OUR USE OF YOUR INFORMATION AS PROVIDED IN THE ARCADETWIST PRIVACY POLICY.
www.arcadetwist.com
About 59% of users remove it
 
Powered by Should I Remove It?

Remove updater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.