home

squirrel.exe

Update

LONG ACCESS Private Company

Publisher:
Paul Betts  (signed by LONG ACCESS Private Company)

Product:
Update

Version:
0.9.4.0

MD5:
7dce13b23407013610c7980e0a4e14c1

SHA-1:
d7a4e0d467734059fd3f0b3183be5f742852c769

SHA-256:
13f236b4337efe7b390107194b60afb3902b0a24c6e114a4f821458c5ec8b0cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 2:40:30 AM UTC  (today)

File size:
1.4 MB (1,499,232 bytes)

Product version:
0.9.4.0

Copyright:
Copyright © Paul Betts 2013 - 2014

Original file name:
Update.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\kyxb5vbb.aon\lib\net45\squirrel.exe

Digital Signature
Signed by:
LONG ACCESS Private Company

Authority:
StartCom Ltd.

Valid from:
2/2/2014 10:00:44 PM

Valid to:
2/4/2016 8:43:03 AM

Subject:
E=info@longaccess.com, CN=LONG ACCESS Private Company, O=LONG ACCESS Private Company, L=Athens, S=Attica, C=GR, Description=EkDttXAz1Nwf1CVV

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0CD6

File PE Metadata
Compilation timestamp:
4/21/2015 8:24:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:vPm+0QFMtzdK7qNT1mShf2RrjNztThNARUJ0rVX11TJARyTOcD31S2cRQX/IRZA/:vLC5K7qt3f2RBNU3jdQRewQsGrPd

Entry address:
0x16DBBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8442

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.4 MB (1,489,920 bytes)

Scan squirrel.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.