» updater.exe
Overview
Analysis
File Details
Programs (1)

updater.exe

Super Backup Online Backup

Strongvault Online Storage LLC

The application updater.exe, “updater 2.5.0.16 © Stronghold.com, Inc, 2013” by Strongvault Online Storage has been detected as a potentially unwanted program by 2 anti-malware scanners. This file is typically installed with the program Super Backup Online Backup by Stronghold.com, LLC.

File name:

updater.exe

Publisher:

Stronghold.com (signed by Strongvault Online Storage LLC)

Product:

Super Backup Online Backup

Description:

updater 2.5.0.16 © Stronghold.com, Inc, 2013

Version:

2.5.0.16

MD5:

034841bcd0c4f49837f16bce45341d4d

SHA-1:

f1a55f7838c87c451f4c641f3a2b345d688a74b5

SHA-256:

64f7e353cd2d3ef8128fded27ce8cf7f7fc109d70628ef440a80d00d5772cc23

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/27/2024 7:40:35 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.StrongvaultOnlineStorage.H

14.8.8.5

VIPRE Antivirus

Threat.4740961

31208

File size:

645.4 KB (660,864 bytes)

Product version:

2.5.0.16

Original file name:

updater.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\super backup online backup\install\3afb1b0\updater.exe

Digital Signature

Signed by:

Strongvault Online Storage LLC

Authority:

VeriSign, Inc.

Valid from:

1/25/2014 7:00:00 PM

Valid to:

3/27/2015 7:59:59 PM

Subject:

CN=Strongvault Online Storage LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Strongvault Online Storage LLC, L=newport beach, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

172B8010556701DF9B19141DC4772C8D

File PE Metadata

Compilation timestamp:

11/29/2012 3:51:03 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:t8QZpwrEZyIhMbiZuXAjIUUyreE0G0Kzq24Wn5:iQMEDheguXmIUUyreE0j8v4W5

Entry address:

0x106AB

Entry point:

E8, C8, 71, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, 68, 20, 07, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, D0, 43, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D... 
[+]

Entropy:

5.9246

Code size:

212 KB (217,088 bytes)

The file updater.exe has been discovered within the following program.

Super Backup Online Backup by Stronghold.com, LLC

Publisher's description - “Super Backup makes backup easy with intelligent system scans that locate and secure your important files, even if they are buried deep in your system. With Super Backup, you never need to fuss with complicated setup screens.”

stronghold.com

58% remove it

Remove updater.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.