home

setup_updater.exe

Andrzej Huzar Huzar Software

Publisher:
Andrzej Huzar Huzar Software  (signed and verified)

MD5:
9b4d66a320e5a6726875d4c368fa2eb7

SHA-1:
a909c4c705ac58220bc62d3f3b65edb8153313a2

SHA-256:
d17b3cd2e0dfefdf15df72fc9dfea41c4d3a94c4649a1703474adc7bcb4a57df

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/16/2024 6:33:00 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
HEUR/QVM20.1.Malware.Gen
1.0.0.1015

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.4

File size:
1.9 MB (2,002,416 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\setup_updater.exe

Digital Signature
Signed by:
Andrzej Huzar Huzar Software

Authority:
GlobalSign nv-sa

Valid from:
11/26/2014 3:04:06 PM

Valid to:
11/27/2015 3:04:06 PM

Subject:
E=huzar@huzar.pl, CN=Andrzej Huzar Huzar Software, O=Andrzej Huzar Huzar Software, L=Wroclaw, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121812629A93579A7A08DBFB2FE87FF370C

File PE Metadata
Compilation timestamp:
1/7/2015 3:37:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.25

CTPH (ssdeep):
24576:CIkSOCJE8FJa1xp3YssALVyLjE0hwv+WsDSxRgJfOGf7i9gxSMXXiNnkJiIRmt9k:CrJC/szkojv+WsFeXMWnkJKtI

Entry address:
0x65BAC

Entry point:
55, 8B, EC, 81, C4, DC, FE, FF, FF, 53, 56, 57, 33, C0, 89, 45, E0, 89, 45, DC, 89, 45, E4, 89, 45, EC, 89, 45, E8, A1, CC, 92, 46, 00, C6, 00, 01, B8, 40, 45, 46, 00, E8, 45, 0F, FA, FF, 33, C0, 55, 68, F4, 5C, 46, 00, 64, FF, 30, 64, 89, 20, E8, 0A, D7, FF, FF, 68, 0C, 5D, 46, 00, A1, F8, 8F, 46, 00, FF, 30, 68, 38, 5D, 46, 00, B8, A4, 00, 47, 00, BA, 03, 00, 00, 00, E8, 1A, F2, F9, FF, 6A, 24, 68, 50, 5D, 46, 00, A1, A4, 00, 47, 00, E8, 05, F3, F9, FF, 50, 6A, 00, E8, 45, 18, FA, FF, 83, F8, 06, 0F, 85...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
401.5 KB (411,136 bytes)

Scan setup_updater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.