home

voupdater.exe

SafeGuard Web Protection

Art Service

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘vidopt’.
Publisher:
ArtService  (signed by Art Service)

Product:
SafeGuard Web Protection

Version:
1.0.0.0

MD5:
bf191c102e93a79b4427df6d65031d0d

SHA-1:
7fb96deaad8d92058b9f4116bddb5973778aba09

SHA-256:
989b7ee3920a33bfe4a8b62b72806b318741eb42be01050e8c78f3a553717cc7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:04:46 AM UTC  (today)

File size:
488.4 KB (500,096 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © ArtService 2016

Trademarks:
ArtService

Original file name:
sguard.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\absoftware\fhd accelerator\voupdater.exe

Digital Signature
Signed by:
Art Service

Authority:
COMODO CA Limited

Valid from:
7/11/2016 9:00:00 AM

Valid to:
7/12/2017 8:59:59 AM

Subject:
CN=Art Service, O=Art Service, STREET=ul. Suvorovskaya d.10, L=Moscow, S=Moscow, PostalCode=107023, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
632073E4E64D74A8DD6354688C011C44

File PE Metadata
Compilation timestamp:
8/9/2016 8:23:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:U9nCc51OVocYZMbzUDjqK0FXL5++pzRRyl4mOS2pn:UP1OVeQ/bI85San

Entry address:
0x6C4EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.6926

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
425.5 KB (435,712 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
vidopt

Command:
C:\Program Files\absoftware\fhd accelerator\voupdater.exe


Scan voupdater.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.