home

claraupdater.exe

ClaraUpdater

ClaraLabSoftware

The application claraupdater.exe by ClaraLabSoftware has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program I - Cinema by iCinema.
Publisher:
ClaraLabs  (signed by ClaraLabSoftware)

Product:
ClaraUpdater

Version:
3.44.1.2

MD5:
c1b683a0414c853974ac5ef5d199a02a

SHA-1:
5102d14f4927522d1dc5f0f2e30842ff6ac9aae6

SHA-256:
eb82f2b3e406b8947f9cfebd2d21df44c46c9211bb122eb7d1cb05a76f20e6dc

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/24/2024 2:22:00 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.6.11

File size:
919.6 KB (941,680 bytes)

Product version:
3.44.1.2

Copyright:
Copyright (C) 2014

Original file name:
Updater.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States d'America)

Common path:
C:\Program Files\common files\claraupdater\claraupdater.exe

Digital Signature
Signed by:
ClaraLabSoftware

Authority:
GlobalSign nv-sa

Valid from:
1/20/2015 5:40:38 AM

Valid to:
1/21/2016 5:40:38 AM

Subject:
CN=ClaraLabSoftware, O=ClaraLabSoftware, L=Paris, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112123154E5E0FD1C6C84C77F8890B7472E0

File PE Metadata
Compilation timestamp:
10/26/2015 5:04:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x85995

Entry point:
E8, 08, 12, 01, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, EC, 18, 8D, 4D, E8, 53, 57, FF, 75, 0C, E8, 69, C3, FF, FF, 8B, 5D, 08, BF, 00, 01, 00, 00, 3B, DF, 73, 60, 8B, 4D, E8, 83, 79, 74, 01, 7E, 14, 8D, 45, E8, 50, 6A, 01, 53, E8, F8, 12, 01, 00, 8B, 4D, E8, 83, C4, 0C, EB, 0D, 8B, 81, 90, 00, 00, 00, 0F, B7, 04, 58, 83, E0, 01, 85, C0, 74, 1E, 80, 7D, F4, 00, 8B, 81, 94, 00, 00, 00, 0F, B6, 0C, 18, 74, 07, 8B, 45, F0, 83, 60, 70, FD, 8B, C1, E9, D2, 00, 00, 00, 80, 7D, F4, 00, 74, 07, 8B, 4D, F0, 83, 61...
 
[+]

Code size:
681 KB (697,344 bytes)

Program Uninstaller
Program name:
I - Cinema

Display publisher:
iCinema

Display version:
1.36.01.22

Uninstall string:
C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe /uninstall=3c91fcc2-ce59-42b3-b901-f68079520898


Remove claraupdater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.