» UpdateStar GmbH
Digital Signature
Analysis
Files (3,085)
Downloads (11)

UpdateStar GmbH

Publisher Information

UpdateStar GmbH is a software developer located in Berlin, Germany*. The publisher primarily developes software that can be classified as adware. Thre are 12 additional code signing certificates issued to this publisher.

Authority:

thawte, Inc.

Valid from:

3/29/2016 2:00:00 AM

Valid to:

3/30/2017 1:59:59 AM

Subject:

CN=UpdateStar GmbH, OU=IT, O=UpdateStar GmbH, L=Berlin, S=Germany, C=DE

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

0b4fa804a949e9a222e54344536e47e3

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore (M)

100.00%

1 / 68 (PUP)

shareit.exe (Kedokisapi by Ruf) (d9c36714225be45a9e3540425b11210f)

1 / 68 (PUP)

side-sync.exe (Cogibah by Bocak) (abe1b0839c918c25ce2fa4a2946d4e6f)

1 / 68 (PUP)

lenovo-easycamera.exe (Kedokisapi by Ruf) (62a582d09c1ac73b225b823b314325f8)

1 / 68 (PUP)

lg-smart-share.exe (Hunodap by Koho) (79b4c9569b048d7c60c93eb09d0b27ae)

1 / 68 (PUP)

tongbu-assistant.exe (Canekenal by Lanipofolo) (97436a352bd538ca3caf3613da518c25)

1 / 68 (PUP)

ubisoft-game-launcher.exe (Homerono) (0c2a9aedfe7d87028fba0b793bcd2f2f)

1 / 68 (PUP)

pdf-xchange-editor.exe (Kakigara) (58fb7fa452a2bf161314795949854df5)

1 / 68 (PUP)

universal-usb-installer.exe (Cogibah by Bocak) (11a9cc18cef05f209cf10aef245cf7a4)

1 / 68 (PUP)

lenovo-system-update.exe (Cogibah by Bocak) (d0effa22fdddacb073e6b5445b575bbe)

1 / 68 (PUP)

lenovo-system-update.exe (Cogibah by Bocak) (32a324d55c16781e1a8f767ddf1610c3)

1 / 68 (PUP)

hamachi.exe (Kedokisapi by Ruf) (cc2fe7094002542800a074a3286b4bbf)

1 / 68 (PUP)

icreinstall_ccleaner.exe (Gome) (dfc428437373fa91fdfa22e01aef966f)

1 / 68 (PUP)

tiptoi-manager.exe (Cogibah by Bocak) (f45e86ce6245b5958b324b128d5d27ea)

1 / 68 (PUP)

apple-mobile-device-support.exe (Pusefice by Lukotikabi) (477ef1a7628fb7ca2720779dd6c7a391)

1 / 68 (PUP)

bluetooth-stack-for-windows-by-toshiba.exe (Cogibah by Bocak) (e7d201baf75962357249092a9df56c55)

1 / 68 (PUP)

samsung-usb-driver-for-mobile-phones.exe (Hunodap by Koho) (3de6a650febbed4cb76c0aa64c935fc8)

1 / 68 (PUP)

icreinstall_side-sync.exe (Kedokisapi by Ruf) (48da9e97097f51d80d904068c24f01d5)

1 / 68 (PUP)

truecrypt.exe (Gobo by For) (1e5d0e4f4294e5b25f185fb0c3be4fb3)

1 / 68 (PUP)

parom-tv-player.exe (Canekenal by Lanipofolo) (f7749c85db30004f2513dc5b2f106c53)

1 / 68 (PUP)

realtek-hdmi-audio-driver-for-ati.exe (Canekenal by Lanipofolo) (b2fb5f12b8e39a4a864dcb57f3b6f6ba)

1 / 68 (PUP)

icreinstall_iso2god.exe (Kakigara) (5119e0d1eceb75541ffec446486c87bf)

1 / 68 (PUP)

bluetooth-stack-for-windows-by-toshiba.exe (Gobo by For) (d9cabfdab149693beb008715bbab0b7a)

1 / 68 (PUP)

canon-ij-scan-utility.exe (Gome) (e30fbca50a6a33bb47d91bda8eec1384)

1 / 68 (PUP)

epson-easy-photo-print.exe (Cogibah by Bocak) (e6f7d4bdcc249aac44a2a485484bc926)

1 / 68 (PUP)

motorola-device-manager.exe (Cogibah by Bocak) (4a53a899ac74d1d5c799184af9214572)

1 / 68 (PUP)

motioninjoy-gamepad-tool.exe (Gome) (099004d585385cec14d235dfe98e58c7)

1 / 68 (PUP)

icreinstall_motioninjoy-gamepad-tool.exe (Gome) (a9535edd150bab2f7ce24bdf90387d31)

1 / 68 (PUP)

icreinstall_lenovo-easycamera.exe (Kedokisapi by Ruf) (1676f02c83dd0b29218eab1ac8f7b477)

1 / 68 (PUP)

d34848669bd58887f4f33bf265d6c72b647d0ed6 (Diba by Sok) (eb0259c01187670ac40541e5819bad86)

1 / 68 (PUP)

a2d768e9ef3bd4f90cfc1bbbfe21429586598ca0 (Diba by Sok) (522c4f5269a1146cabc90d9a56f1e0e8)

Latest 30 of 3,085 files

Downloads URLs for files signed by UpdateStar GmbH.

1 / 68 (PUP)

http://www.toursguardmeta.com/Z1IMZBtZcW5Xj8dqvUjCp1YijoedscB6dMsgmsxnoOEURmJ9pf8wy6BOXHIvm HdN2fFhbkqbXGwqek1nr9M omH7ZgI3CDSSR14uHolhV1G5C2rw7Z_SblfadOtkEDmMHqbvIwVeZ6eOWFdZqtS1i5reikWnVe6nLM7xtl_owXLtT2HWX auLV0G_XFHmWrjDu0hqpH-GywAAETnFhMQMjg2N5sG1_WBYsKNLmSSVSSS2AZy4859_BUjex4KsrpOj6TRthujAA== (shareit.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/3P smT2sSRp4aW4WPXm nYBRoUo3FetdRLhDSlB3Q_M9XoDfLZ42vyxMUyJ_V04WrBjAEjlGlVRUmT0WFpg04SJaJIbbTzaOms17yjB4tT 9iNAgZuspF0xFHN7MyT1 YcJzEpkwVjP8talFt14jMFk7E0gm8tQhjAJGiIOWrfBss5YeI2ui2lfqw63Rzcc6gqEOrYSMZRzAB9HK1fv FquJXQK4X1zzgJNFVsZ2DtdriInBTnJE7BmXw8q4Br2BfABEA2NWW_0TvRuSPwDKFwQqef39zJk29CGbIaCDo6YXU7E9u4iSeW_mcs0OGTO2INTOOlgXspGzgp9ZxhcqzMqGH6iPGehdgZbE8uiW EatEkY6 S4Vb95EbvA9x8bRmMLcFGyPG2uF0sio7346wi1FzPLZF3AKYZ5I0DOwmcl1_wZ 3YF4G6O9SKCy62s2F9lhqQ5kAYEsbQVz2RHm26c2WRhXTLJqUwClpoBnXFZf9bm7HpJp_WXXxappA9QRBoHtIIhwAXXBqV 9sxNY0D f2_sanCFa96kDHz2Q5iqzSX8U95svrBHGr4tacMvKLL_cmPgE3cR qy9N68kVTToyliapdN5vqj3FEx5ba3vtydQfY 0Rmvpqt_PUMtyI teCV6Pk-G1MAAMTc2vN3ilavT_0Hw6F9MtlGMdiAA6cQkmUAW4eNsfEFPZ14414NNp_OPsarJeNQfGK4juk1U0XBjpyuNOgU81csCu0fHRvfBvkF (tongbu-assistant.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/ 7CZtDHMJYF10O4BIfvw9DnR8nY3ZA69cMC1H_ a_GOTSsZi9tRX7gV2OEUXni3ZTHBUwP5497TXvyigZiiz5Gzyda4yqysSGLKgPxV8wHZv1Do2lFMZNqOzdMlUmGaL6fRxWHvrVX5PRtf6z7s7GK7n3dYiy545Z2yZ0RpSWiJ8pk5hTIaCL1YYJmrWSlRMorcSwKjO7uEAszNmbQOdzDD UUv0Bi2CeiiPrPOGiySf5XG0BIn_vFXw4Z2fYYilz8xRFNOZueucxE_curC7fjAVK8orlb3DriB7sixnrh2HKycDiNEIuM6bmaseKrDfq8BpkMepr3WJj6nQsUZzjhUirkXLoe6rtiMkKJ_dMA97 tLxgRp6xTKhiqxInM2B3Pv7w0P11BRg8ODOtUoI8GC3Ofi1OOUtBvInVp97_JSOQrIftil2lYBobiTr5MK7AiPv1394sLkXxDnGgJgVnTEP5XmX2DpuTu6A SAwe6iUztH78t wAclWNs7qHTW_OJGYwKj2b_F0zPzL0e_FORhj1T JQ==-G0EAAETdFtP3P4nVZhbpIgeDiPgHwSEH7G8pBZZiGGyMrSFKN6 xiFIUMZffICLxwi8DY2zqrVA9rvnYI0VGgsC AQ== (universal-usb-installer.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/l7rVbvtIbQSialJmJ95ByS edikaV0IC73IRayGniSk9FWy7OzTbO0nvdMeyE7wixDKnNkU7IcirYcjuIndZq0hdnjm1kpDYOl65UDeu_g_vUEG W0alLi3W_KfTYfkWpioYDFyRJTzMrh_WdVrUp8N37iM648XVWWTDFKhNHvVxZqdtHz7jKElZo7OUfHeFxZhFTk1L9kkhzRYFVSrFHG0Mg6pWWv4 Gt3 BezrHF9MH7dlA0qNMh20vLyxWj07xEuvj3WPDuaSjaWr8ybsLghtrhykNfwZdYBeAre4eOXO2D vF5pWzOgEyVSMbiw9UICPzQu0FonVv6texPYzkfh4Gf2PacdoAblvY1OacRhBQwLdF5Ta6uGOYYmUUix9DOXpuLvzMFad1Muan1afAjnq2a8IMob4uE2na3frU8ILSQN6vLpqIRpojbegfftsALxUNSBn9o6iDt6ZvS1TAJot08gWcY4Xd3QNe79VWTL1uZIxGOnHGA zFLciEoF4oJIEEI74HjBR4asEzWhJR1ST1FRImnYb01QCb6sv2XmCzQNwNNA=-G1MAAORtm09NiRy_6Wg3JBpFYEFOuYC9amt kIsexA4ew8dxudQKfuMECfZA9BVvDzKw4IvWcExDxTbpKUqambFODzG_74B_Bw== (samsung-usb-driver-for-mobile-phones.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/WBGbq4OJBuZDLYp3c4X6peb1NTEqK_jIToBjqvx_OrKx3oeeBIaHWSmilKkzFD4z8FFrCugaZz9KM8uGt ThefcSeqb8urZ etdx12gkWcqZ3YgRcd3OaFuSHZuEED8ThxGqBPj4PWJNpxZQhTC_UBcSZNwOecPeE6XUmh3piSeBMr57MD1ETg9HgpEE64Twl63jRwORMwQNDsOSF9rlWuj5bwtFbQyp3YsEJUzxx8h55q1h3h4=-G18AAMSaW0z3z2CsiWDIhrKpsEfhxL8kbMCBU9hEg8mD45Add0SSeGOUt5iYM0aHPtp5ucgnPf0sUtNbxQj5tiPVjxutIoy1P951TFlKAw== (bluetooth-stack-for-windows-by-toshiba.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/9c_LYIIlAG2rpnT2ihTtxZAjjce_Jq2nZ36XCc0RKzVPqrxvkBzPanKDHv9Y4SaMIFIHn3SGPNGNmlE79Zxw9iKW8A1RbLgYOQr5SeVpLeeRNS5IvM7xV a ejEurzwcJO42stfrn08RRFA2Yc5nK9T1P5SP9TK8ZLf7cx M_wRB5i9qOR4bgNRCJDdPHfSVqplgceGWLbQ_uPHqQmFi_qGWvIw04JXoY5Jw7EUy8OBSPlwhxeuYYnwGLmJBzAr HHEUEGHQnhzJeyBs9pS i8UMePhiXdLW35lxUZ7VAAETaPd7fxguwzXcKXhFX5bd u7oY1B9KeVsC_Q22UIqQdXaerboCS6MTMjykebKSDKWWVmBEi8eSODDw_jj1NlzKNgs3uxxLJF557ZBXYQ Cw plurzoDbZ1CBwb5C9sC8aErCq9OWmg4jhZrZ2jTp4fNJH0z2nchPWpEtuzJDlYgi3FJs__As0tBP_wu Vy7tBhNlNe_phssyH0oh52g3Jb3r0eTVCaoYe1JwawaofDt50WxMXLQhiPNgXd 0z6TOpPEXeEvxlICNcydy8W2VHUljslK6fbwA2kTnjFWOydcwiWC0SSg==-GzYAAMRuOW4owji4TXx9Xw8bcOBQ24g7DRtj4wueIOiVNTZCyfIZoL6pZpy7Q1fDXBKP8AE= (epson-easy-photo-print.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/U6J6JDPfjXTHW1SP51DrzSpi5sBiW5vBN0m27preu_ohIyEodAe7A9LDnOGsZA6Eh_S0KE0Bezkh9HXzrd_6Y1VGUPizTSRRsyuiDCoHQzDoH_oGz CnBiATNsbTzMgTN0e5yvrnp0WgWwjzZgofjpal2q5VOvpEIszsdKdLByclQ yIV0PPJyD0 zKbz7ockB8lBG_oVKMMxtGeJytOzQP_E_dAA==-G10AAORtm09X5zf6IiIhkYrVySkHTgklAQVhW37Ce4zlHIXBgzUeiZ3vapFpPp1f6OgXcabHhC38oH5hZ1l6R0pVo4N4Cd8S (cisco-packet-tracer.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/AGToakmuzBOoGCys2wnaVq7SlZfBPmHLycpiKVrCp9XIFSg83la53VDTeoYmej6MtyOEUC6hc2up6EMxojDGnXwEZ7yFHYJorlg2b8LmFLAL3YY4vRna vv2na ADgFOoWia37ptj9JQ4PpoQWxk2Qt9hXs8VWCxNGR6I7sKOnqYrruKEsCrjb_YX6qIN6thfo1KnXaAlfuXY4t4LrWbMGP_eRFAM85lSb6ocB2g Y8ZfyCy54ACHJoCABj561qaqxY 2t6x_8NalYecUm1KdUGZomFld0oWSIRY6yH71ejhN6Zfu1nSBs1ZfjAUAhZR8WG9HT6n2X8rv83frxk9hsP5v2CIuc_FwX2sN00Epwk SlYWfR0w7EdOnBWHGFGSxUoL51KICBM0UyYxJ0xoytkSTsltA2a HDP8 vIIIrtfgw9p6U=-GzMAAARkm dlnvcI8QgyRKzAIQfs_yIJCMN64zpQboz8Ni5h5BmNT_bJULCjrPqXihz2DA== (polski-vag.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/WojnW7AU8lbT01UVZ97MrEZK D2XhSL6IRmPH OcaSe3BubQo7hdQAZ3C2FgtQ aalOIh0YrRb4dNucTUFVWLW5Q1j_tf1A8R604sBjJyZKdk_8FT40SBbIcjLX JhRxQ53UT2VgYP CmWZd8rfKfXnme1_ujZrAKZEpT9oKgWAiuZWF9C9cO6kEgsAZPYabjcIzwzOw-G1EAAOR2tk3Wg3S0G 3GS1wRGa7_OtiAA4faFqCRho2xszxC0AtKG6tQoGwGiO b1_bBYmv_31gmuNOio1CR_fEhBAfeU9svaUbFCKwM (launch-manager.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/Tnzvh2Y2TvWdFgQFssO77LamHsFv5DI BIMGL_903C0zfGxtlWairYdiCo4gVmne1Glw Qk7phkHbn7vHlGXKO2oKUq89aG54BDQ bjA iX86Otscz9zW6pzInTGrRD7O0XYkX6R93deyzuM1JQ6TflMAnEG9CjL21R9tWWz_f_Ld7WTuIXjfTLmpsBKa5TRdwPCnkTf45s29gZTiE2wLzfmeRHLzg==-G1MAAORtm09NiRy_6Wg3JBpFYEFOuYC9amt kIsexA4ew8dxudQKfuMECfZA9BVvDzKw4IvWcExDxTbpKUqambFODzG_74B_Bw== (samsung-usb-driver-for-mobile-phones.exe)

1 / 68 (PUP)

http://www.toursguardmeta.com/d5Y6 QF4kDhUtTjF2RfJQvmIL1Sfyg2fmEhYY_9c1fl_NFqVxyhxpWSbFk8ce22l8OIzIzTDK14tQAu1_LL1BJHn iMtkML6GcR8qo0o7cEX9smlltxUbpA633rg72S1kQYWrZqv8KejvcKfIn9tTG_ch_MZkM88eo0KMi4VlIAl5bsBwpTe7U6_a0WDH CFY98rhyKL-GyUAAEQ3hrEtdoO4gQ 0CbFElF10tn2o L9JgB9yolytJG2LHuoE (hamachi.exe)

The certificates below are also signed by UpdateStar GmbH.

00FBADF674BC78E279821FBDF9D937DF06 (Jan 11, 2016 to Jan 11, 2019)

4BA54A70AEBC69BFA87C05E1 (Dec 13, 2016 to Apr 06, 2018)

112125B6400786F530FAF13A45235D19144F (Mar 30, 2016 to Mar 31, 2017)

1121C7585A2F5B2218EC6B36D472BA6496D8 (Jan 25, 2016 to Mar 23, 2017)

1121206405ACDAB5906908B3939BD86EF916 (Jan 08, 2016 to Mar 06, 2017)

112124922D3C2654755777EEC500C21F7151 (Feb 03, 2015 to Feb 04, 2016)

009ED227324380B40DDE36C8D31A33831F (Jan 01, 2013 to Jan 02, 2016)

71A04D21E9F4BB6E19C3CB7D720E6245 (Jun 10, 2014 to Jun 11, 2015)

4C04D272CAAEF51D5786CA84D80CFB98 (Dec 01, 2011 to Dec 01, 2012)

2ACDB74CEA0A72647526F5A80FA98905 (Oct 20, 2010 to Oct 21, 2011)

10 of 12 code signing certificates issued

* Note, the details and description above are based on the code signing digital signature issued to UpdateStar GmbH by thawte, Inc. on March 29, 2016 with the serial number '0b4fa804a949e9a222e54344536e47e3'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.