home

Update.exe

Update

CANAL+ DISTRIBUTION

This is a setup program which is used to install the application. The file has been seen being downloaded from canalhttpdlcpa.canal-plus.com.
Publisher:
CANAL+ DISTRIBUTION  (signed and verified)

Product:
Update

Description:
ConsoleApplication1

Version:
1.0.0.2

MD5:
85f9233c6d32c4053f29f51c69e64dca

SHA-1:
c3abf18a07cd61e9bc2571682b2b8903caae6c73

SHA-256:
fa2da374ba626b868502664fd4af0bae8f9d482e248be34f217fcb5af4c2c7d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2024 1:51:45 AM UTC  (today)

File size:
107.8 KB (110,416 bytes)

Product version:
1.0.0.2

Copyright:
Copyright © Canal+ Distribution 2011

Original file name:
Update.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\update.exe

Digital Signature
Signed by:
CANAL+ DISTRIBUTION

Authority:
GlobalSign nv-sa

Valid from:
5/18/2011 5:24:54 PM

Valid to:
5/18/2014 5:24:50 PM

Subject:
E=christophe.girard@canal-plus.com, CN="CANAL+ DISTRIBUTION", OU=Technique, O="CANAL+ DISTRIBUTION", L=ISSY LES MOULINEAUX, S=FRANCE, C=FR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000013003C0803D

File PE Metadata
Compilation timestamp:
10/28/2011 9:46:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:XiIZjAmC+xmH6i+e6EBUk/WjTIs8j+PZgpi7yiQ:XiIZjA/HSe3Uk/aC+SwWiQ

Entry address:
0x3AFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
8 KB (8,192 bytes)

The file Update.exe has been seen being distributed by the following URL.

http://canalhttpdlcpa.canal-plus.com/cplus/ondemand/.../update.exe

Scan Update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.