home

Update.EXE

IncUpdate

CleanMyPC Technology Limited

The application Update.EXE by CleanMyPC Technology Limited has been detected as a potentially unwanted program by 3 anti-malware scanners. This file is typically installed with the program Registry Repair Wizard by SmartPCTools.
Publisher:
Sunisoft  (signed by CleanMyPC Technology Limited)

Product:
IncUpdate

Description:
Online Updater

Version:
2007.7.30.252

MD5:
7f3145c17190163b32813c2206eced01

SHA-1:
216a49046ac2c11fe872536c98606ea7c0622ff9

SHA-256:
5f076936447917ca09d80765c399f177c0f068fc7b7bdca38b2e49c140b5dcfd

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 4:19:04 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/18011

Quick Heal
(Suspicious) - DNAScan
9.15.11.00

Reason Heuristics
Win32.Generic.CleanMyPCTechnology.Meta
15.9.13.22

File size:
646.4 KB (661,888 bytes)

Product version:
2.9

Copyright:
Copyright(c) 2003-2007, Sunisoft

Original file name:
Update.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\smartpctools\registry repair wizard\update.exe

Digital Signature
Signed by:
CleanMyPC Technology Limited

Authority:
The USERTRUST Network

Valid from:
3/22/2010 12:00:00 AM

Valid to:
3/21/2012 11:59:59 PM

Subject:
CN=CleanMyPC Technology Limited, O=CleanMyPC Technology Limited, STREET="ROOM C1D 6/F, WING HING INDUSTRIAL BUILDING", STREET=14 HING YIP STREET, STREET="KWUN TONG, KOWLOON, HONG KONG", L=HONG KONG, S=NA, PostalCode=NA, C=HK

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
253A6CD8243978CADEED6FF2D0C2F4E1

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:CQ/b1QYb9Ify+sRp66qHbJrEenumvJq+NOek92eMlTsWKKW:T/Fb9MME6q7inuOLMlTDE

Entry address:
0x1CA001

Entry point:
60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, A0, 1C, 00, 83, BD, 22, 04, 00, 00, 00, 89, 9D, 22, 04, 00, 00, 0F, 85, 65, 03, 00, 00, 8D, 85, 2E, 04, 00, 00, 50, FF, 95, 4D, 0F, 00, 00, 89, 85, 26, 04, 00, 00, 8B, F8, 8D, 5D, 5E, 53, 50, FF, 95, 49, 0F, 00, 00, 89, 85, 4D, 05, 00, 00, 8D, 5D, 6B, 53, 57, FF, 95, 49, 0F, 00, 00, 89, 85, 51, 05, 00, 00, 8D, 45, 77, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72...
 
[+]

Entropy:
7.9633

Packer / compiler:
ASPack v2.12

Code size:
1.3 MB (1,368,576 bytes)

The file Update.EXE has been discovered within the following program.

Registry Repair Wizard  by SmartPCTools
SmartPCTools Registry Repair Wizard is registry utility whose purported purpose is to remove redundant items from the Windows registry.
www.registryrepair.net
51% remove it
 
Powered by Should I Remove It?

Remove Update.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.