home

upcheck.exe

World Cyberkiwon Corp.

Publisher:
World Cyberkiwon Corp.  (signed and verified)

MD5:
04754cd51fc86ed3a6027a6f672882cc

SHA-1:
32a89a259663ec36caa1dfdcad3e9fcd70a87d91

SHA-256:
69ff427ce513fcc3115302032fdb41ff465372d196c9767ba27d7f1d0d1b1a54

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/7/2024 4:42:33 AM UTC  (today)

Scan engine
Detection
Engine version

Norman
Smalldoor.B!genr
11.20151201

File size:
539.6 KB (552,592 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wbaduk\upcheck.exe

Digital Signature
Signed by:
World Cyberkiwon Corp.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/26/2010 1:00:00 AM

Valid to:
3/26/2012 1:59:59 AM

Subject:
CN=World Cyberkiwon Corp., O=World Cyberkiwon Corp., L=Jung-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6949F1517E90180B2E06C3B0C74A7FAD

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:C9Oe6oAq7MrXOdTHDY45WJlqZiIGflkGf/w:lVWcEAb/q7Gflt4

Entry address:
0x6DB20

Entry point:
55, 8B, EC, 83, C4, F4, B8, C0, D8, 46, 00, E8, 24, 8A, F9, FF, A1, 30, F2, 46, 00, 8B, 00, E8, F0, 08, FC, FF, A1, 30, F2, 46, 00, 8B, 00, BA, 80, DB, 46, 00, E8, E3, 04, FC, FF, 8B, 0D, E4, F1, 46, 00, A1, 30, F2, 46, 00, 8B, 00, 8B, 15, 34, C7, 46, 00, E8, DF, 08, FC, FF, A1, 30, F2, 46, 00, 8B, 00, E8, 53, 09, FC, FF, E8, 6A, 5E, F9, FF, 00, 00, FF, FF, FF, FF, 06, 00, 00, 00, 55, 70, 64, 61, 74, 65, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
435 KB (445,440 bytes)

Scan upcheck.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.