home

upd.exe

Unimake Solucoes Corporativas Ltda

This is a setup program which is used to install the application. The file has been seen being downloaded from www.unimake.com.br.
Publisher:
Unimake Solucoes Corporativas Ltda  (signed and verified)

MD5:
7d7ab3fe8a326bbf387fd434350e7c06

SHA-1:
f3c35de26ebaee781a67ce7774138f52e6c329ce

SHA-256:
3eae4e10fa9d0c2cb0471c683be2b68484dd50b82147130e47c8f524c5ca3c4e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 5:25:14 PM UTC  (today)

File size:
3 MB (3,187,408 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\upd.exe

Digital Signature
Signed by:
Unimake Solucoes Corporativas Ltda

Authority:
GlobalSign nv-sa

Valid from:
2/4/2015 1:27:51 PM

Valid to:
2/5/2016 1:27:51 PM

Subject:
E=claudinei@activeweb.com.br, CN=Unimake Solucoes Corporativas Ltda, OU=TI, O=Unimake Solucoes Corporativas Ltda, L=Paranavai, S=Parana, C=BR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121643443590823AF3AE1D3D31BBA9D1652

File PE Metadata
Compilation timestamp:
2/11/2015 4:02:11 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
49152:7StVQ/HK1eTM7Q6oYOW/vy9Le8ZTwRXnn6KYCi3CUZECUZ:gQ/Ho7loYOAvcy8ZdC6W

Entry address:
0x8EB6C

Entry point:
DB, E3, 31, C0, BB, 28, D8, 58, 00, 89, C1, E8, DC, 3E, 09, 00, 09, C0, 74, 0A, B8, 24, 07, 54, 00, E8, 6E, A5, 08, 00, E8, 99, 65, FA, FF, 90, 60, 89, C6, 89, DA, 8A, 06, 8A, 5E, 01, 8A, 4E, 02, E8, 86, 00, 00, 00, 88, 06, 88, 46, 01, 88, 46, 02, 61, C3, 51, 52, 83, F9, 64, 7E, 07, B9, 64, 00, 00, 00, EB, 0A, 83, F9, 00, 7D, 05, B9, 00, 00, 00, 00, BA, 64, 00, 00, 00, E8, 06, 00, 00, 00, 5A, 59, C3, 90, 90, 90, 83, EC, 04, 60, 89, C6, 89, CF, 89, 54, 24, 20, 52, 57, 0F, B6, 4E, 02, 0F, B6, 43, 02, 29, C1...
 
[+]

Code size:
1.5 MB (1,583,616 bytes)

The file upd.exe has been seen being distributed by the following URL.

http://www.unimake.com.br/pub/.../upd.exe

Scan upd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.