home

update.exe

lifebrowser update programmer Mr:mohamed ahmed ali jpaly

lifecompany

The executable update.exe, “www.life-host.info” has been detected as malware by 7 anti-virus scanners.
Publisher:
lifecompany

Product:
lifebrowser update programmer Mr:mohamed ahmed ali jpaly

Description:
www.life-host.info

Version:
1.00.0002

MD5:
4711631b1545c4b6fad4acd9c1e00566

SHA-1:
d62357643f3ef41498b46d84b04f1fcc568ca9fb

SHA-256:
bc3f8f99d397e22eb379a2689f61fd3451bf28777c74126386348a4ad3e54ede

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
12/22/2025 11:47:43 AM UTC  (today)

Scan engine
Detection
Engine version

Bitdefender
Gen:Variant.Symmi.16247
1.0.20.235

Comodo Security
UnclassifiedMalware
16485

Emsisoft Anti-Malware
Gen:Variant.Symmi.16247
8.14.02.16.03

F-Secure
Gen:Variant.Symmi.16247
11.2014-16-02_1

G Data
Gen:Variant.Symmi.16247
14.2.22

IKARUS anti.virus
Trojan.Win32.Spy
t3scan.2.0.3.0

Trend Micro House Call
TROJ_GEN.R47H1CE
7.2.47

File size:
788 KB (806,912 bytes)

Product version:
1.00.0002

Copyright:
lifebrowser update programmer Mr:mohamed ahmed ali jpaly

Original file name:
update.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\lifebrowser\update.exe

File PE Metadata
Compilation timestamp:
1/4/2012 9:18:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:27777777mC31VQXhhnZajroc12EEac4j2OrKyUeqlZnl1bI0I:qFCXns2EED4JrhD0

Entry address:
0x10B0

Entry point:
68, 68, 69, 47, 00, E8, F0, FF, FF, FF, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 9B, 77, 1B, D0, 0E, 2C, 79, 4E, AA, 7C, 59, D5, 2B, 59, E4, E0, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 41, 54, 56, 47, 75, 61, 72, 64, 00, 00, 00, 00, 00, 00, 00, 00, 00, C2, 03, 01, F0, 1A, 8F, 03, C0, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 01, 00, 00, 00, 5E, 4C, A6, 0E, 89, 50, 26, 43, 8A, BB, 0D, 96, 94, 75, 2B, 84, 01, 00, 00, 00, A0, 00, 00, 00...
 
[+]

Entropy:
6.5743

Code size:
620 KB (634,880 bytes)

Remove update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.