home

DUControl.exe

DirectUpd@te control

William Levra-Juillet

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘DUControl’. This is installed with DirectUpdate.
Publisher:
WildUP - William Levra-Juillet  (signed by William Levra-Juillet)

Product:
DirectUpd@te control

Description:
DirectUpd@te - Control tool

Version:
4.7.6 build 137 - 32bits

MD5:
756a85e1d8409320a3dea8d768966118

SHA-1:
d4686745f48e441b2821a73a3140a658b21624f9

SHA-256:
0dd7ae5c8581d86eb173f7e2891d841a13b2afcbd7cafceaa078b449d11bb71e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:29:37 AM UTC  (today)

File size:
54.6 KB (55,872 bytes)

Product version:
4.7.6 build 137 - 32bits

Copyright:
©2000-2013 William Levra-Juillet

Original file name:
DUControl.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\directupdate v4\ducontrol.exe

Digital Signature
Signed by:
William Levra-Juillet

Authority:
COMODO CA Limited

Valid from:
8/7/2012 9:00:00 PM

Valid to:
8/8/2015 8:59:59 PM

Subject:
CN=William Levra-Juillet, O=William Levra-Juillet, STREET=101 Roebuck Castle, L=Clonskeagh, S=Dublin, PostalCode=14, C=IE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
241D59C1D0F0AA4995A22C1E2A267679

File PE Metadata
Compilation timestamp:
5/31/2015 5:55:37 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:FewSJaMs33pNlJysMXu5+kh3h7OkAKZozW2zXVXF0n0bNDr2YcMEZqC:FewSS3pNlJ/4gtOkAdjXVVOAnP+R

Entry address:
0x3F8C

Entry point:
48, 83, EC, 28, E8, CF, 03, 00, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 3D, 42, 00, 00, FF, 15, C7, 12, 00, 00, 4C, 8B, 1D, 28, 43, 00, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 59, 04, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, E8, 41, 00, 00, 48, 89, 44, 24...
 
[+]

Entropy:
5.9807

Code size:
15 KB (15,360 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DUControl

Command:
"C:\Program Files\directupdate v4\ducontrol.exe"


The file DUControl.exe has been discovered within the following program.

DirectUpdate  by WildUP - William Levra-Juillet
Publisher's description - “DirectUpdate is a dynamic DNS updater that runs as a NT service with remote (web) administration. It integrates with many of the free or pay DNS services and you can automatically update multiple DNS accounts as soon as your IP changes.”
www.directupdate.net
8% remove it
 
Powered by Should I Remove It?

Scan DUControl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.