» ALUpdate.exe
Overview
Analysis
File Details
Programs (1)

ALUpdate.exe

Sophos AutoUpdate

Sophos Limited

This is installed with Sophos AutoUpdate.

File name:

ALUpdate.exe

Publisher:

Sophos Limited (signed and verified)

Product:

Sophos AutoUpdate

Description:

AutoUpdate synchronisation component module

Version:

5.2.0.276

MD5:

813064bb747207e9b06224feb2745ae0

SHA-1:

7a72d5977f2616224bdb69632ae3824b80252849

SHA-256:

a96a4837c40eee14c749bd108f3e497cc7d27d2668f10e760e7e939d08a89840

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 8:59:10 PM UTC (today)

File size:

1.2 MB (1,227,464 bytes)

Product version:

5.2.0

Original file name:

ALUpdate.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\sophos\autoupdate\cache\sophos_autoupdate1.dir\alupdate.exe

Digital Signature

Signed by:

Sophos Limited

Authority:

VeriSign, Inc.

Valid from:

10/23/2013 6:00:00 PM

Valid to:

12/22/2016 4:59:59 PM

Subject:

CN=Sophos Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sophos Limited, L=Abingdon, S=Oxfordshire, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2BC0BB54AB4C36B217953FD3032522A8

File PE Metadata

Compilation timestamp:

10/12/2015 6:31:32 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x7BF9D

Entry point:

E8, E3, 09, 00, 00, E9, 36, FD, FF, FF, CC, FF, 25, DC, E6, 4B, 00, FF, 25, E0, E6, 4B, 00, FF, 25, E8, E6, 4B, 00, FF, 25, F4, E6, 4B, 00, FF, 25, FC, E6, 4B, 00, FF, 25, 04, E7, 4B, 00, FF, 25, 08, E7, 4B, 00, FF, 25, 70, E7, 4B, 00, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 70, 20, 50, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56... 
[+]

Entropy:

6.4564

Code size:

753 KB (771,072 bytes)

The file ALUpdate.exe has been discovered within the following program.

Sophos AutoUpdate by Sophos Limited

Sophos AutoUpdate is the updater program which runs with Windows (in the background as a service) and automatically starts up when your computer boots. It checks for updates and automatically downloads and installs them if found based on the user's settings.

www.sophos.com/en-us/support/knowledgebase/36262.aspx

18% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.