» UpdateAntiMalware.exe
Overview
Analysis
File Details
Programs (1)

UpdateAntiMalware.exe

Update

Security Stronghold LLC

The application UpdateAntiMalware.exe by Security Stronghold has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Stronghold AntiMalware by Security Stronghold which is a potentially unwanted software program.

File name:

Publisher:

Security Stronghold (signed by Security Stronghold LLC)

Product:

Update

Version:

1.0.0.0

MD5:

8ce440e0442d1664b81579ddb14f4620

SHA-1:

896d9f982b8d8ff5ef7528d18f2b34e50afbbfbb

SHA-256:

7e4151fe77ff42a03494c1125b60ac03174201005408c60094f3331f6f22d589

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 11:01:16 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.8.30.4

File size:

119.7 KB (122,528 bytes)

Product version:

1.0.0.0

Original file name:

UpdateAntiMalware.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\stronghold antimalware\updateantimalware.exe

Digital Signature

Signed by:

Security Stronghold LLC

Authority:

GlobalSign nv-sa

Valid from:

11/14/2014 8:59:35 AM

Valid to:

1/11/2016 11:49:56 AM

Subject:

E=manager@securitystronghold.com, CN=Security Stronghold LLC, O=Security Stronghold LLC, L=Astrakhan, C=RU

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121429E972F949C65D48148980A12CEE76F

File PE Metadata

Compilation timestamp:

4/30/2014 3:02:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1536:LlZomhaIOENaLXMRJXqdgEof327LELz/+fOA+RLehL9IjOeVEm73mYrTlpl:BZzhjOWaLXxeePE4B+R6wjOCB72Y1

Entry address:

0x3778

Entry point:

E8, 9B, 04, 00, 00, E9, 37, FD, FF, FF, 3B, 0D, 28, 80, 40, 00, 75, 02, F3, C3, E9, 1D, 05, 00, 00, 6A, 14, 68, D0, 68, 40, 00, E8, CF, 03, 00, 00, FF, 35, B4, 86, 40, 00, 8B, 35, C4, 50, 40, 00, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, C8, 50, 40, 00, 59, EB, 67, 6A, 08, E8, F9, 05, 00, 00, 59, 83, 65, FC, 00, FF, 35, B4, 86, 40, 00, FF, D6, 89, 45, E4, FF, 35, B0, 86, 40, 00, FF, D6, 59, 59, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, DC, 50, 40, 00, FF, D6, 59... 
[+]

Code size:

12.5 KB (12,800 bytes)

The file UpdateAntiMalware.exe has been discovered within the following program.

Stronghold AntiMalware by Security Stronghold

Publisher's description - “Stronghold Antivirus is a lightweight and user-friendly antivirus and antimalware for everyday use both at home and in the office. Unlike other antiviruses it doesn't consume a lot of resources, it doesn't confuse you with difficult to understand windows and complex options.”

www.securitystronghold.com/stronghold-antivirus

65% remove it

Remove UpdateAntiMalware.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.