upgrade.exe

EMS Software Development

Publisher:
EMS Software Development  (signed and verified)

MD5:
32d7b26d4005bfc8d50784a52cf175f9

SHA-1:
72947d06ced3e5d649950a7f4c7d5068ef292183

SHA-256:
fb4d1f7a100f18322ed6704ddaf29784879ae9c7c390e4693edbc028ddf51d7f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:26:55 PM UTC  (today)

File size:
601.3 KB (615,776 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ems\sql manager lite for mysql\upgrade.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
10/1/2007 7:00:00 AM

Valid to:
10/1/2008 6:59:59 AM

Subject:
CN=EMS Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=EMS Software Development, L=Chelyabinsk, S=Chelyabinsk reg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A05CEF213DD40A06B5A301DBCFF95B7

File PE Metadata
Compilation timestamp:
2/19/2008 7:56:47 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
12288:/kBpOG5Vph7WZLBmmq6xGJOpqw6na1l0CKY:MBAuVpJWZLBmX0Gkp1B1l0r

Entry address:
0x1000

Entry point:
68, 01, C0, 4E, 00, E8, 01, 00, 00, 00, C3, C3, 63, C5, 03, 5E, BC, EC, 24, B0, 2D, C5, E8, D3, 36, 77, 75, 70, D0, 17, 5B, 6F, 99, 13, 71, 2F, AD, 65, 4B, CC, FD, E6, 96, C5, 0F, 12, C6, 2C, D7, 75, 4A, 12, 97, DB, 82, 21, BF, D6, D5, 84, 3D, 1F, 13, F7, A1, D9, A9, C6, F5, 79, 9F, 48, EB, 2B, D3, 00, E8, 8B, A9, 39, BE, 21, 0A, 3A, 7B, B5, D0, 91, 28, BF, 3B, 1C, F2, 4F, 08, A3, 0A, 3E, 83, 4D, F9, 95, C6, 7E, F0, DB, B6, 43, 1F, 76, 79, 0C, 01, E8, DD, 6C, B3, 9E, 5F, 60, 8B, 25, 86, 05, DE, 8C, C3, 63...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
715 KB (732,160 bytes)

The file upgrade.exe has been discovered within the following programs.

EMS SQL Manager 2007 for MySQL  by EMS Database Management Solutions, Ltd.
www.mysqlmanager.com
About 3% of users remove it
 
Powered by Should I Remove It?

Scan upgrade.exe - Powered by Reason Core Security