home

mAktualisieren.exe

Aktualisieren

windata GmbH u. Co.KG

Publisher:
windata GmbH & Co.KG  (signed by windata GmbH u. Co.KG)

Product:
Aktualisieren

Version:
8.05.0020

MD5:
adff8587e1be845752a6f688cb5ff106

SHA-1:
99ea1f5b39b08634dd9c484f19b6c55c53134cd6

SHA-256:
7f4090e475fbd892c5c97a3a3b3c910b0e743a0066d45519aa1687714e20c4ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 6:22:17 PM UTC  (today)

File size:
407.9 KB (417,656 bytes)

Product version:
8.05.0020

Copyright:
© Copyright by windata GmbH & Co.KG

Original file name:
mAktualisieren.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\professional 8\maktualisieren.exe

Digital Signature
Signed by:
windata GmbH u. Co.KG

Authority:
GlobalSign nv-sa

Valid from:
4/22/2010 2:48:55 PM

Valid to:
4/22/2013 2:48:51 PM

Subject:
E=info@windata.de, CN=windata GmbH u. Co.KG, O=windata GmbH u. Co.KG, L=Kisslegg, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012825C71D02

File PE Metadata
Compilation timestamp:
1/20/2011 9:56:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:fVP5YNXucKe80q2ABK6qpcLWpCdusSmiPYXoc0V:6q2ApNXoc0

Entry address:
0x280C

Entry point:
68, 7C, 85, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 43, C7, E2, 0A, 76, 82, 04, 46, 8A, 08, AB, 78, 69, 42, 45, 81, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 66, CF, 11, B7, 0C, 00, 4F, 6E, 6C, 69, 6E, 65, 55, 70, 64, 61, 74, 65, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 02, F3, C3, 60, CE, E5, CA, 9B, 4B, 80, 92, AA, B3, AB, 19, B5, 40, AF, A7, D5, 2B, 18, E7, DE, 4D, A8, 40, 5B, E1, 0C, 6E, 0D, B8, 72, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
372 KB (380,928 bytes)

Scan mAktualisieren.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.