home

Updater.exe

Evolve Updater

Echobit, LLC

Publisher:
Echobit LLC  (signed by Echobit, LLC)

Product:
Evolve Updater

Version:
0.9.49.0

MD5:
22716efb7ccebd02eb0059e65f065d5f

SHA-1:
84d7f47d31340ad39064229e7cb11cc3f9104ed5

SHA-256:
75c11bccd1797557640339bde3ec729d2b1c141a5902480724148b0ab0a03df6

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/24/2024 11:02:06 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.6379

F-Secure
Suspicious:W32/Malware.cca4bc46cb!Online
11.2015-20-11_6

Trend Micro House Call
HV_COBRA_CG15329B.RDXN
7.2.324

File size:
1.9 MB (1,959,808 bytes)

Product version:
0.9.49.0

Copyright:
Copyright © Echobit 2015

Original file name:
Updater.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\echobit\evolve\drivers\updater.exe

Digital Signature
Signed by:
Echobit, LLC

Authority:
GlobalSign nv-sa

Valid from:
9/17/2013 12:24:38 PM

Valid to:
12/17/2016 11:24:38 AM

Subject:
E=dreijer@echobit.net, CN="Echobit, LLC", O="Echobit, LLC", L=Golden Valley, S=Minnesota, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112188B8964A115EC9ACE1AC0E6BB7B31627

File PE Metadata
Compilation timestamp:
11/10/2015 1:26:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:4W7duhnW2gasY6DwOBfrnvV7UeWt5L8NV+:4rh0YiwOBpIeWb1

Entry address:
0x1D77DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 60, 00, 00, 80, 10, 00, 00, 00, 78, 00, 00, 80, 18, 00, 00, 00, 90, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 02, 00, 00, 00, A8, 00, 00, 80, 03, 00, 00, 00, C0, 00, 00, 80, 04, 00, 00, 00, D8, 00, 00, 80, 05, 00, 00, 00, F0, 00...
 
[+]

Entropy:
6.9655

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.8 MB (1,923,072 bytes)

Scan Updater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.