Gridinsoft Logo
File Icon

The FFWsUpgrade.dll (FFWsUpgrade) File Analysis

Updated 2 months ago
Checked by Malaware Check
FFWsUpgrade.dll

Technical Analysis

File Name FFWsUpgrade.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-16 19:01:04 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
326,160
File Size (bytes)
2025-03-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c52216d2b58fa8c3e3aed8778531dfab
SHA1
67c58fac33e664291a318130918db32274ce5d54
SHA256
6c679be49cc00ceffaf01c1cb30962a4fdd02b5fe62705496562848bc74ea8e4
SHA512
c0dd165fb951500c9cec457dc1825487205dc170c3b0d47ef560f3b25073318d0f3bb0d319a159b9c50e7e0cac34d3610d156fec138efe81accbbe6ecc502868
ImpHash
46d0272924acf456817e5eb904d6b930

PE Analysis

Basic Information

▼
Icon
Hash: a4c09c4859e5ebf0c25d5741e4dcf096
Fuzzy: f3a8cd694b22d7e9f267a395d00d9ba9
dHash: c69a727219ccb2b2
Image Base 0x180000000
Entry Point 0x18000f4d8
Compilation Time 2024-05-22 13:26:57
Checksum 0x000580f1 (Actual: 0x000580f1)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path C:\code\Bin\x64\Release\FFWsUpgrade.pdb
Digital Signature OK
Imports 11 libraries
Exports 14 functions
Resources 12 Resources
Sections 6 Sections

Version Information

▼
CompanyName Wondershare
FileDescription FFWsUpgrade
FileVersion 13, 4, 2, 7361
InternalName FFWsUpgrade
LegalCopyright Copyright (c) 2020-2024 Wondershare. All rights reserved.
OriginalFilename FFWsUpgrade
ProductName FFWsUpgrade
ProductVersion 13.4.2.7361
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 68,863 bytes 69,120 bytes 5.85 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5C12B293391E4F19DB2C609FCCEF1A16
.rdata 0x00012000 33,276 bytes 33,280 bytes 4.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5E9FB2B4A97C43D1997F3A51902FBA5E
.data 0x0001b000 3,376 bytes 2,048 bytes 4.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AE8747BB22D64886FFA59C91CF1D6CF7
.pdata 0x0001c000 4,500 bytes 4,608 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E130525849DC177FFF8BC55F9AA13606
.rsrc 0x0001e000 196,360 bytes 196,608 bytes 5.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9E2655F8B1FC73E142E4A30B2A8A23E5
.reloc 0x0004e000 424 bytes 512 bytes 4.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6FC962AC51F97CEB66EA662761116816

Resource Analysis

▼
Total Resources: 12 (195,630 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 194,325 bytes
99.3%
RT_GROUP_ICON 1 132 bytes
0.1%
RT_VERSION 1 792 bytes
0.4%
RT_MANIFEST 1 381 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product FFWsUpgrade
Description FFWsUpgrade
File Version 13, 4, 2, 7361
Original Name FFWsUpgrade
Signing Date 01:38 PM 05/22/2024 (381 days ago)
Verification Status Signed
Signers Wondershare Technology Group Co.,Ltd; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo RSA Time Stamping Signer #4; Sectigo RSA Time Stamping CA; Sectigo
Internal Name FFWsUpgrade
Copyright Copyright (c) 2020-2024 Wondershare. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Sectigo RSA Time Stamping CA #2 Chain
Validity Period: 2019-05-02 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9
Sectigo RSA Time Stamping Signer #4 #3 Chain
Validity Period: 2023-05-03 00:00:00 → 2034-08-02 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 39 4C 25 E1 7C A0 6D 27 A8 65 E2 3B D9 1D 22 D4
Wondershare Technology Group Co.,Ltd #4 Chain
Validity Period: 2022-04-08 00:00:00 → 2025-04-05 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 02 F9 35 06 DF D7 1C 8A 5A 61 52 70 29 1C 75 25

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware