home

liveupdate.exe

KoreanClick

The Nielsen Company

Publisher:
KoreanClick Co., Ltd.  (signed by The Nielsen Company)

Product:
KoreanClick

Version:
1, 0, 0, 3

MD5:
d9c7002a3a6b911fe1fe2f5c2b89c6ff

SHA-1:
e59a606cc9e504fd64ca4c03d9040b0c061e2549

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
6/24/2025 1:31:31 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
275.7 KB (282,336 bytes)

Product version:
1.1

Copyright:
(C) KoreanClick Co., Ltd.

Original file name:
LiveiTrack.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\koreanclick\koreanclick itrack 2.1\liveupdate.exe

Digital Signature
Signed by:
The Nielsen Company

Authority:
VeriSign, Inc.

Valid from:
4/7/2014 9:00:00 AM

Valid to:
4/9/2015 8:59:59 AM

Subject:
CN=The Nielsen Company, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=NetSight Meter, O=The Nielsen Company, L=Oldsmar, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0AF2B68B0B46C5C2109323BC3E976727

File PE Metadata
Compilation timestamp:
2/2/2015 1:48:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:AmU0c9Baf3cs06UXmPCzT4c8ZMHb/Vr3JwqX4Cq2iFYzbwHh+xmBofivRhPBMUaS:AmU0cTYT8m48iHjZrX4v2zbCj

Entry address:
0xB7DA

Entry point:
55, 8B, EC, 6A, FF, 68, B8, E2, 40, 00, 68, 66, B9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, EC, D5, 40, 00, 59, 83, 0D, 70, 19, 41, 00, FF, 83, 0D, 74, 19, 41, 00, FF, FF, 15, E8, D5, 40, 00, 8B, 0D, 64, 19, 41, 00, 89, 08, FF, 15, E4, D5, 40, 00, 8B, 0D, 60, 19, 41, 00, 89, 08, A1, E0, D5, 40, 00, 8B, 00, A3, 6C, 19, 41, 00, E8, 1C, 01, 00, 00, 39, 1D, D8, 17, 41, 00, 75, 0C, 68, 62, B9, 40, 00, FF, 15, DC, D5...
 
[+]

Entropy:
4.6184

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

Windows Firewall Allowed Program
Name:
C:\Program Files\KoreanClick\Koreanclick iTrack 2.1\LiveUpdate.exe


Scan liveupdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.