» checkforupdate_smusa2011 (2013_10_28 17_45_56 utc).exe
Overview
Analysis
File Details
Programs (2)

checkforupdate_smusa2011 (2013_10_28 17_45_56 utc).exe

TrueUpdate Client

Liberty Street Software

This file is installed with multiple programs including StampManage 2010 and StampManage USA 2011.

File name:

Publisher:

Indigo Rose Corporation (signed by Liberty Street Software)

Product:

TrueUpdate Client

Version:

3.5.3.0

MD5:

fe4c279b638c4fa1b88e6ae1c781b8f1

SHA-1:

697346e21e78c63ce96241b4e5e38fcf36bb08f0

SHA-256:

a36b1330ca0719a921d3bbea6b307da8ca01e39974403b2d3c5cdf1b3f671e64

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 10:19:35 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

Suspicious

23.00.65.151016

File size:

468.5 KB (479,784 bytes)

Product version:

3.5.3.0

Trademarks:

TrueUpdate is a trademark of Indigo Rose Corporation

Original file name:

tu_rt.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Liberty Street Software

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/29/2009 7:00:00 PM

Valid to:

9/28/2011 6:59:59 PM

Subject:

CN=Liberty Street Software, OU=SECURE APPLICATION DEVELOPMENT, O=Liberty Street Software, L=Mississauga, S=Ontario, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

332A645D2BA6D640A42AB291A9ECBC2F

File PE Metadata

Compilation timestamp:

11/2/2009 2:10:32 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:aM6F9Kn7hJK/d8gUMniK9+dQEI46ELrMkag7IPJ8Qs:aMQKnNU9iu+LI/ELQ6IPSQs

Entry address:

0x132C20

Entry point:

60, BE, 00, 70, 4C, 00, 8D, BE, 00, A0, F3, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8600

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

432 KB (442,368 bytes)

The file checkforupdate_smusa2011 (2013_10_28 17_45_56 utc).exe has been discovered within the following programs.

StampManage 2010 by Liberty Street Software

Publisher's description - “Use the integrated Report Designer to create your own reports. Reports can be exported to PDF, Excel, HTML and many other formats. Easily attach images, files and URL links to your records. Create sophisticated custom queries and view or print the results.”

www.libertystreet.com

8% remove it

StampManage USA 2011 by Liberty Street Software

Publisher's description - “Use StampManage stamp collecting software to catalog stamps from the USA . StampManage is licensed by SCOTT (tm) to use their industry standard numbering system.”

About 2% of users remove it

Scan checkforupdate_smusa2011 (2013_10_28 17_45_56 utc).exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.