upgrade.exe

EMS Software Development

Publisher:
EMS Software Development  (signed and verified)

MD5:
77ae100389b57d79e4e2fe09a817cc92

SHA-1:
353c3948c25f3e88881c72c6470a7449861b863f

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/19/2024 3:23:27 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.ASPack
0.98/17411

Quick Heal
(Suspicious) - DNAScan
11.14.11.00

File size:
601.3 KB (615,776 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ems\sql manager for mysql\upgrade.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
9/30/2007 8:00:00 PM

Valid to:
9/30/2008 7:59:59 PM

Subject:
CN=EMS Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=EMS Software Development, L=Chelyabinsk, S=Chelyabinsk reg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A05CEF213DD40A06B5A301DBCFF95B7

File PE Metadata
Compilation timestamp:
3/14/2008 8:52:34 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
12288:xn0AcXFk6gcqvsCUHxWnjQP9DZR/S6q6xGJOpqo2SCZzCR7FAzof:VKVk6pusCUYjQPlSD0GkptPhAzA

Entry address:
0x1000

Entry point:
68, 01, C0, 4E, 00, E8, 01, 00, 00, 00, C3, C3, F4, A7, 84, 00, CB, 74, B6, 40, 06, 80, 25, 4A, 90, DD, AE, FC, 3A, 1E, 80, F6, 91, C8, 77, 8E, C6, 98, 6B, 7B, 52, 5F, 49, 59, EC, 0F, 8E, 1C, 65, 16, C8, B0, 01, 20, 45, 10, DD, 64, FC, 09, 63, 8D, 9A, E5, 08, FD, D5, D9, E1, 8B, AE, 45, EB, AD, F3, AB, 69, C4, 9D, 34, A2, 54, E7, 62, 3E, D4, ED, DE, 65, D4, 74, CF, EA, 83, 75, 37, C7, 46, 66, A9, 80, 1B, 9B, DF, D7, DE, 6C, 80, 5E, 83, D9, 5A, 57, BA, 77, AD, 06, 5B, C7, 19, E6, 95, CA, D1, E7, 96, C6, 3C...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
715.5 KB (732,672 bytes)

The file upgrade.exe has been discovered within the following programs.

EMS SQL Manager 2007 for MySQL  by EMS Database Management Solutions, Ltd.
www.mysqlmanager.com
About 3% of users remove it
PostgreSQL 8.3  by PostgreSQL Global Development Group
PostgreSQL, often simply Postgres, is an object-relational database management system (ORDBMS).
www.postgresql.org
7% remove it
 
Powered by Should I Remove It?

Scan upgrade.exe - Powered by Reason Core Security