Gridinsoft Logo
File Icon

The updater_itch.io.win.exe (Cloud-Based Collaboration System) File Analysis

Updated 1 month ago
Checked by Malware Check
updater_itch.io.win.exe

Technical Analysis

File Name updater_itch.io.win.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-23 09:00:23 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
80,525,377
File Size (bytes)
2025-11-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7d8e76a0392229a430198771a0fa5ecb
SHA1
4b3d39280b91463f9f5e7cdaa4fecca04488b15b
SHA256
43fb13b54486cca7891a5aaa6d05f4525c5ae977bca63e3a0d9cdabf9242d9ba
SHA512
b80cb53c007c514e15c272be9245f27563a0eeeebb7a33392a66591abe2790f735d7b13936bd0391d825e8fe7287cd728414a0c90e33012c3dfa35bb84ccf117
ImpHash
98aa68e4d11d1d6caaff2fb7a8208443

PE Analysis

Basic Information

▼
Icon
Hash: 7d7f9aa89f8b1759dbec83bdc7ca672c
Fuzzy: b07e0cc09131865e4e109e061b8eeefa
dHash: e0f0e8ccdce8f04c
Image Base 0x140000000
Entry Point 0x1415375c8
Compilation Time 2025-11-20 19:08:40
Checksum 0x04cd7404 (Actual: 0x04cd7404)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\20.18.0\out\Release\node.pdb
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 8535 functions
Resources 47 Resources
Sections 7 Sections

Version Information

▼
FileDescription Cloud-Based Collaboration System
FileVersion 5.30.5223.6288
InternalName elitebyte
LegalCopyright © 2019 ProActive Software. All rights reserved.
LegalTrademarks DataForge Corporation trademark.
OriginalFilename streamline.exe
ProductName NextGen Framework
ProductVersion 5.30.5223.6288
CompanyName ProActive Software
Comments Designed for high-availability environments. Build date: 06.06.2019 12:43:48.
Translation 0x0409 0x04b0
FileDescription Stealth Banking Trojan & Clipboard Manipulation Tools
CompanyName Erebus Solutions
ProductName Hyperion Persistence Engine
FileVersion 33.69.319.914685
ProductVersion 33.69.319.914685
InternalName perseus
OriginalFilename AegisNova.exe
LegalCopyright © 2025 Erebus Solutions. All rights reserved.
Comments
LegalTrademarks All rights reserved
PrivateBuild PrivateBuild
Framework 5,a_&*MPdzUYuwWQ 6^xPJh-G
Target ^TfSbk9 r9UCs#v#$Dp(58BIN8s;n-87.M_uF6uLe5q5g
Compiled By F2R#tG;WAGsHdQ^$)AF6kwkb@QELsyk,a@7%_Ts4LU(tAhmq9
Build Date SSh8ZR $Y5;,1_
Architecture VgxNE@c4W vRqB2ZQoMAeHoXgLd0a
Owner e8U^-Uiic64S
Contact _,MQPLqDieGuJ(zAu(0(8E
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 22,605,996 bytes 22,606,336 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E8FCEF0E0492B841BF034DB22E21237E
.rdata 0x01591000 45,542,468 bytes 45,542,912 bytes 6.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8FBDC61B836A6DBCA1CD533D07C17033
.data 0x04100000 3,067,524 bytes 203,264 bytes 3.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 130F0DE9EA38F9ED851A67E9DE78C44B
.pdata 0x043ed000 1,055,916 bytes 1,056,256 bytes 6.94 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 45D7B7DC10837274DFBFC7E738D743FC
.fptable 0x044ef000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x044f0000 245,415 bytes 245,760 bytes 6.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D129C9407B8C7AE5B0C4867B5763ECB3
.reloc 0x0452c000 146,452 bytes 146,944 bytes 5.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 35C334E37CC0F3A382BCBE56C8A901CA
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 47 (242,998 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 235,457 bytes
96.9%
RT_STRING 32 3,084 bytes
1.3%
RT_ACCELERATOR 1 72 bytes
0%
RT_GROUP_ICON 1 146 bytes
0.1%
RT_VERSION 2 3,592 bytes
1.5%
RT_MANIFEST 1 647 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
Product NextGen Framework
Description Cloud-Based Collaboration System
File Version 5.30.5223.6288
Original Name streamline.exe
Internal Name elitebyte
Copyright © 2019 ProActive Software. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware