The GoogleUpdate exe (Google Updater (x64)) Google LLC File Malware Analysis
Gridinsoft Logo
File Icon

The GoogleUpdate.exe (Google Updater (x64)) File Analysis

Technical Analysis

File Name GoogleUpdate.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-29 09:00:41 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
6,863,512
File Size (bytes)
2025-11-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
63a16db0aaa01b28b2d0cbbbda071085
SHA1
708e7d3860a45b756353cd21d9f34c4cde5eeb8a
SHA256
6db8c3fbfb74566ec8b9763c0fe9273a59d9652344740eb2dccfd372bff079aa
SHA512
da6b7675a8701d531d96b7f35df8e34bc678bff3f017c57d1f9a75192e0fcbc40708ae8827616b6fcf639d72ad1c1eb323c8b902354ed95c88acc91dad5dd423
ImpHash
a73d539977d6fdf3d450c6c819007daf

PE Analysis

Basic Information

Icon
Hash: 5e172c0dc3b3b45ca039c9e793a07b29
Fuzzy: a0944f9361276e2a5e874864a5c88639
dHash: f8e2eae6b696c6cc
Image Base 0x140000000
Entry Point 0x1402c4b90
Compilation Time 2025-09-15 15:02:11
Checksum 0x00698a2f (Actual: 0x00698a2f)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path updater.exe.pdb
Digital Signature OK
Imports 20 libraries
Exports 1 functions
Resources 352 Resources
Sections 12 Sections

Version Information

CompanyName Google LLC
FileDescription Google Updater (x64)
FileVersion 142.0.7416.0
InternalName Google Updater (x64)
LegalCopyright Copyright 2025 Google LLC. All rights reserved.
OriginalFilename updater.exe
ProductName Google Updater (x64)
ProductVersion 142.0.7416.0
CompanyShortName Google
ProductShortName GoogleUpdater
LastChange 37414c5bb9d01777a88623acd52b8cf16b73bba6-refs/branch-heads/7416@{#1}
Official Build 1
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,976,537 bytes 4,976,640 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6F3FBA82150BEEC1288A28B34B6F16DE
.rdata 0x004c0000 983,208 bytes 983,552 bytes 6.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8971BBBC503880599697E44D6E286066
.data 0x005b1000 197,688 bytes 75,264 bytes 2.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 31BA6A99DFFD01C71EB84D539AF31E9C
.pdata 0x005e2000 152,772 bytes 153,088 bytes 6.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CCB95FF6E8D381965201ABA8C22E24B7
.fptable 0x00608000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.tls 0x00609000 641 bytes 1,024 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 146B75FB900309D003CD6577F8F82563
CPADinfo 0x0060a000 56 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60D3EA61D541C9BE2E845D2787FB9574
LZMADEC 0x0060b000 4,593 bytes 4,608 bytes 6.06 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 05E9EAB8428A551A281AB278073669FA
_RDATA 0x0060d000 500 bytes 512 bytes 4.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 89F5BF472BC474C2813E16E654BC8B57
malloc_h 0x0060e000 195 bytes 512 bytes 3.16 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9D9407321873499B9CC203D6B6621C9C
.rsrc 0x0060f000 634,456 bytes 634,880 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 44BCFD5DC2EBD404D0D03F005D916396
.reloc 0x006aa000 20,512 bytes 20,992 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 47DAFE82F4E5BAEA4B28A9C0A941EA10

Resource Analysis

Total Resources: 352 (616,336 bytes)
Resource Type Count Total Size Percentage
TYPELIB 6 66,428 bytes
10.8%
RT_BITMAP 1 18,040 bytes
2.9%
RT_ICON 6 10,032 bytes
1.6%
RT_DIALOG 2 708 bytes
0.1%
RT_STRING 334 518,896 bytes
84.2%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 1,164 bytes
0.2%
RT_MANIFEST 1 978 bytes
0.2%

Certificate Chain Analysis

Certificate Information
Product Google Updater (x64)
Description Google Updater (x64)
File Version 142.0.7416.0
Original Name updater.exe
Signing Date 07:54 PM 09/15/2025 (114 days ago)
Verification Status Signed
Signers Google LLC; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name Google Updater (x64)
Copyright Copyright 2025 Google LLC. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #4 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
Google LLC #5 Chain
Validity Period: 2024-04-08 00:00:00 → 2027-04-10 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B 50 CF 24 6B 26 3E FD 85 A7 29 31 51 58 F3 FF

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware