home

UpdMg.exe

UpdMg

BOS Business Organization Software GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BOSUpdate’.
Publisher:
BOS Software Bad Aibling  (signed by BOS Business Organization Software GmbH)

Product:
UpdMg

Version:
1.0.2.0

MD5:
0e1273387a44107256891987868e3390

SHA-1:
55b4e45ce5161eab1e03fa88e51f0b0846d7166a

SHA-256:
f099fee915325b0ae837a6dbca135263b5ad8fd81712913306f6fdfd261f1eb1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 6:17:32 AM UTC  (today)

File size:
23.2 KB (23,784 bytes)

Product version:
1.0.2.0

Copyright:
Copyright © 2013

Trademarks:
BOS®

Original file name:
UpdMg.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
BOS Business Organization Software GmbH

Authority:
thawte, Inc.

Valid from:
11/11/2015 1:00:00 AM

Valid to:
2/2/2018 12:59:59 AM

Subject:
CN=BOS Business Organization Software GmbH, O=BOS Business Organization Software GmbH, L=Bad Aibling, S=Bayern, C=DE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
3E149944215C4FC65C20066D7C9A8720

File PE Metadata
Compilation timestamp:
7/15/2016 6:37:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:El5Z/kcAZtkrT6PHc+GIbN939fN3/wNa7PnfePPL8qtCZZ8QvhP:EtraL9NN3/yEPmdtCEAJ

Entry address:
0x5AEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
15 KB (15,360 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BOSUpdate

Command:
C:\dentalprogramme\bos\dent6\updmg.exe


Scan UpdMg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.