» Update.exe
Overview
Analysis
File Details

Update.exe

Update

Hangzhou Chuangju Technology Co.,LTD

File name:

Update.exe

Publisher:

Hangzhou Chuangju Technology Co.,LTD (signed and verified)

Product:

Update

Version:

3, 0, 5, 0

MD5:

822fdd40ee5ba6a0b2bfe3f999c0d03d

SHA-1:

73d6631468a93c3f944bc856ab864a4a3da4a0d4

SHA-256:

cb76b819786466dc21072663802218f9613ab47a4a3a5443f27a0cd5e5fa9240

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 7:11:45 PM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

HW32.CDB

1.3.0.4959

File size:

621.6 KB (636,552 bytes)

Product version:

3, 0, 5, 0

Original file name:

Update.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\safedogupdatecenter\update.exe

Digital Signature

Signed by:

Hangzhou Chuangju Technology Co.,LTD

Authority:

WoSign eCommerce Services Limited

Valid from:

7/18/2011 4:27:34 AM

Valid to:

7/19/2014 9:43:00 AM

Subject:

E=web@safedog.cn, CN="Hangzhou Chuangju Technology Co.,LTD", O="Hangzhou Chuangju Technology Co.,LTD", L=Hangzhou, S=Zhejiang, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:

7D81565064D7

File PE Metadata

Compilation timestamp:

7/15/2014 8:49:58 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:EP9d7qa6qarkZN4Ht8FEEBUFmIb5P+634tDZx1j+doyaFgORteodk2:ERYrkT4Ht8FbBUFTbFhI/rj4kgORsoa2

Entry address:

0x1046F0

Entry point:

55, E8, EC, 47, 00, 00, 7C, CB, 90, 2C, 37, 61, B9, D7, CE, 37, A6, 1F, A7, 97, AE, FF, 7E, FF, 36, B7, E8, 32, 1D, BB, F3, C3, 69, 57, 76, 56, 58, 2D, B7, BF, 6F, 5B, F9, 85, 3D, 02, 29, C7, 4E, 8F, 8E, 6F, 73, 7C, 09, 6E, B5, EC, AB, 5C, 68, F8, B6, 8D, 58, 35, F4, 26, 6F, AC, D4, 78, 83, EA, 4E, 24, E3, C8, 56, 78, 35, E2, FD, D3, 9A, A9, 0B, 8B, 64, 7A, C3, 80, C5, EE, 97, 8B, DE, 25, 6D, C7, 39, 50, 44, A0, 23, 2E, 96, DA, 66, E4, 1D, EE, 0E, 42, B1, 59, 95, 9D, EB, A7, 35, 9E, 8F, 4F, 06, 3F, E6, 67... 
[+]

Entropy:

7.9149 (probably packed)

Code size:

387 KB (396,288 bytes)

Scan Update.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.