home

LiveUpdate.exe

LiveUpdate

Wuhan WuChang CandySoft Studio

Publisher:
CandySoft  (signed by Wuhan WuChang CandySoft Studio)

Product:
LiveUpdate

Version:
1.0.0.0

MD5:
1297a9f5bbfe90220334380f0213f825

SHA-1:
a2a986d9706bbc4fca542cb19d7f160762e95ce0

SHA-256:
645ad57c8c7aca8c6beed400611b499c9bc3d650be9b7e5b4b1f05e3f7b5b462

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 8:17:48 AM UTC  (today)

Scan engine
Detection
Engine version

Boost by Reason
Optional.WuhanWuChangCandySoftStudio
188838

File size:
79.3 KB (81,240 bytes)

Product version:
1.0.0.0

Copyright:
Copyright ©CandySoft 2010

Original file name:
LiveUpdate.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\candysoft\copytoy\liveupdate.exe

Digital Signature
Signed by:
Wuhan WuChang CandySoft Studio

Authority:
VeriSign, Inc.

Valid from:
7/18/2010 5:00:00 PM

Valid to:
7/18/2013 4:59:59 PM

Subject:
CN=Wuhan WuChang CandySoft Studio, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Wuhan WuChang CandySoft Studio, L=Wuhan, S=Hubei, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7C17C37FE5B77993C8FEFBE1FAC46E69

File PE Metadata
Compilation timestamp:
6/14/2011 12:48:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:nUSyesOO5mX6sckGophSyesOO5mX6FaPCB:Qep7KszGopVep7KQO

Entry address:
0xDE7E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8688

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
48 KB (49,152 bytes)

Scan LiveUpdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.