home

updater.exe

4Zero_FW_Updater

Performance Products Limited

Publisher:
Snooper  (signed by Performance Products Limited)

Product:
4Zero_FW_Updater

Version:
1.0.0.4

MD5:
3d0978e7fb7808004d451c862ca60bed

SHA-1:
6f175b38f2c38d93df8331d95c9708ec091da1c6

SHA-256:
3584041d7de613bb59600dfd06c37fd74de556328ecc8ad1be72dd798767bd43

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:31:56 PM UTC  (today)

File size:
3.7 MB (3,870,920 bytes)

Product version:
1.0.0.4

Copyright:
Snooper

Original file name:
4Zero FW Updater v1.0.0.5.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\updater.exe

Digital Signature
Signed by:
Performance Products Limited

Authority:
GoDaddy.com, Inc.

Valid from:
7/29/2015 12:18:39 PM

Valid to:
7/29/2016 12:18:39 PM

Subject:
CN=Performance Products Limited, O=Performance Products Limited, L=Runcorn, S=Cheshire, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00C862F470E03C02E4

File PE Metadata
Compilation timestamp:
11/30/2015 1:42:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:LPyN7coPc13AXb37zzOXfPyN7coPc13AXb37zZDDG:eN7coPc13EL7zzOXCN7coPc13EL7zZD6

Entry address:
0x39FDB6

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F0, 39, 00, 0C, 00, 00, 00, B8, 3D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.0055

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.6 MB (3,792,384 bytes)

Scan updater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.