» update.exe
Overview
Analysis
File Details

update.exe

SumYum Info Tech Co.,Ltd.

File name:

update.exe

Publisher:

PCFixKit.com (signed by SumYum Info Tech Co.,Ltd.)

Version:

1.0.2.10

MD5:

df6d5df4548fada9f55759cc4f6c4192

SHA-1:

9205a3a76747a71a5150881088b66b479502565c

SHA-256:

f9dfd096c027f92d342a7667355b6b6bac3471f990ef2b992cb0dec06fd49c9c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/3/2024 3:50:55 PM UTC (today)

File size:

864.7 KB (885,424 bytes)

Product version:

1.0.1.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pcfixkit\update.exe

Digital Signature

Signed by:

SumYum Info Tech Co.,Ltd.

Authority:

COMODO CA Limited

Valid from:

12/11/2014 7:00:00 PM

Valid to:

12/12/2015 6:59:59 PM

Subject:

CN="SumYum Info Tech Co.,Ltd.", O="SumYum Info Tech Co.,Ltd.", STREET="Nanning Ming Xiu Road, No. 122 City Brist", L=Nanning, S=Guangxi, PostalCode=530000, C=CN

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00DA8A70137917E6F0EFF0A7877F81AE96

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:mGCVhFzyaNh/FyCvjj6MQSTmiiZq9fKIe/dLbZxTRUpVpdzx:mGCvh9yjAqKEPRbj1Ub

Entry address:

0xB7C04

Entry point:

55, 8B, EC, 83, C4, F0, B8, EC, 77, 4B, 00, E8, E4, EE, F4, FF, 68, 7C, 7C, 4B, 00, 6A, 00, 68, 01, 00, 1F, 00, E8, 1F, F3, F4, FF, 85, C0, 75, 10, 68, 7C, 7C, 4B, 00, 6A, 00, 6A, 00, E8, 1D, F1, F4, FF, EB, 0E, A1, 78, AC, 4B, 00, 8B, 00, E8, AB, 43, FB, FF, EB, 30, A1, 78, AC, 4B, 00, 8B, 00, E8, 19, 42, FB, FF, 8B, 0D, E0, AD, 4B, 00, A1, 78, AC, 4B, 00, 8B, 00, 8B, 15, 70, 65, 4B, 00, E8, 19, 42, FB, FF, A1, 78, AC, 4B, 00, 8B, 00, E8, 8D, 42, FB, FF, E8, 7C, C8, F4, FF, 52, 4F, 5F, 55, 50, 44, 41, 54... 
[+]

Entropy:

6.6903

Developed / compiled with:

Microsoft Visual C++

Code size:

731.5 KB (749,056 bytes)

Scan update.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.