home

Update.exe

WombatUpdate

X-Rite Incorporated

Publisher:
X-Rite Incorporated  (signed and verified)

Product:
WombatUpdate

Version:
1.0.0.9

MD5:
2b07394c895dedde407a6a83591f73f6

SHA-1:
2097a1c8d1eee624f96b5346e626f57258ed7e97

SHA-256:
67bb50fe15e0bd60509d0f41c04b80d3f53cab6819906b524f47886d1fd34d4c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:34:24 AM UTC  (today)

File size:
319.4 KB (327,032 bytes)

Product version:
1.0.0.7

Copyright:
Copyright © 2011

Original file name:
Update.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\update.exe

Digital Signature
Signed by:
X-Rite Incorporated

Authority:
VeriSign, Inc.

Valid from:
11/13/2011 4:00:00 PM

Valid to:
12/1/2012 3:59:59 PM

Subject:
CN=X-Rite Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=X-Rite Incorporated, L=Grand Rapids, S=Michigan, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
59B2F404A4E9BA1119FE5D9EC76A1EEE

File PE Metadata
Compilation timestamp:
10/5/2012 11:52:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:NebIFq3OBVRIy9bj34BEVr6j3kZWjhFkyyWQHHHHHHH947hNOOOOMfCytkD:NebIFq3KDKBEVr6j3kxWB7hK6UkD

Entry address:
0x61FE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.3751

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
17 KB (17,408 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.