» Upgrade.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (2)

Upgrade.exe

AudibleManager 6.6.0.0

Audible Inc.

This is the uninstaller utility registered in the Windows Control Panel for the program AudibleManager by Audible, Inc.. This file is installed with multiple programs including AudibleManager and Audible Download Manager.

File name:

Upgrade.exe

Publisher:

Audible Inc. (signed and verified)

Product:

AudibleManager 6.6.0.0

Description:

Upgrade Module

Version:

5, 0, 0, 12

MD5:

2a97f20a8b4c996a0420b312ecee46eb

SHA-1:

fd2e55ca145be72fb72d4ecc8d3e46426b5700e4

SHA-256:

e90c923323a8eae55fad5426876301d9cb2c541a3d1a25bc4edf978b96564020

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/27/2024 3:45:16 PM UTC (today)

Scan engine

Detection

Engine version

F-Secure

Suspicious:W32/Renos.he!Gemini

11.2016-22-05_1

File size:

869.4 KB (890,216 bytes)

Product version:

5, 0, 0, 12

Trademarks:

AudibleManager is a Trade Mark of Audible Inc.

Original file name:

Upgrade.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\audible\bin\upgrade.exe

Digital Signature

Signed by:

Audible Inc.

Authority:

VeriSign, Inc.

Valid from:

11/14/2007 6:00:00 PM

Valid to:

11/14/2008 5:59:59 PM

Subject:

CN=Audible Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=IT Services, O=Audible Inc., L=Wayne, S=New Jersey, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3F56390894DD7CC4695ED9A0EDA45017

File PE Metadata

Compilation timestamp:

10/14/2008 3:49:46 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

12288:T6H2MgO+1d11I2/EYpEIygf2jooZQxclQ7ua3/Nh:2gOw1zHErgf2TZQX7ugh

Entry address:

0x694B8

Entry point:

6A, 60, 68, 30, 14, 48, 00, E8, 0C, BC, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 60, D7, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, E0, 62, 47, 00, 8B, 4E, 10, 89, 0D, 98, D2, 48, 00, 8B, 46, 04, A3, A4, D2, 48, 00, 8B, 56, 08, 89, 15, A8, D2, 48, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 9C, D2, 48, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 9C, D2, 48, 00, C1, E0, 08, 03, C2, A3, A0, D2, 48, 00, 33, F6, 56, 8B, 3D, CC, 60, 47, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

5.7995

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

468 KB (479,232 bytes)

Program Uninstaller

Program name:

AudibleManager

Display publisher:

Audible, Inc.

Display version:

2089882806.2089882868.2090316064.2089882826

Uninstall string:

C:\Program Files (x86)\Audible\Bin\Upgrade.exe /Uninstall

The file Upgrade.exe has been discovered within the following programs.

Audible Download Manager by Audible, Inc.

Audible Download Manager is a free simple way for users of Audible, an online audio bookstore, to organize their purchased books, podcasts, and other media.

www.audible.com/sw

17% remove it

AudibleManager by Audible, Inc.

AudibleManager is a free simple way for users of Audible, an online audio bookstore, to organize their purchased books, podcasts, and other media.

9% remove it

Scan Upgrade.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.