home

hwatch.exe

Kuzma Safonov

The application hwatch.exe by Kuzma Safonov has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program FVD Suite 3.0.2 by flashvideodownloader.org.
Publisher:
Kuzma Safonov  (signed and verified)

MD5:
91fde72563108d40e5cbcfbfe7d9c52e

SHA-1:
adf6cdef7cfa41affd988c89e7c0444319148edf

SHA-256:
fe0f6833f49ff57ab5a8ec6164cb247a94cd45af970eec7c63eef5bcd375c79d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/26/2024 3:46:31 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.KuzmaSafonov (M)
15.10.21.16

File size:
65 KB (66,584 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\fvd suite\hwatch.exe

Digital Signature
Signed by:
Kuzma Safonov

Authority:
COMODO CA Limited

Valid from:
2/15/2012 2:00:00 AM

Valid to:
2/15/2013 1:59:59 AM

Subject:
CN=Kuzma Safonov, O=Kuzma Safonov, C=UZ

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D5508D7420AEF0F616CAA5346E80B7E0

File PE Metadata
Compilation timestamp:
7/11/2010 7:21:49 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
768:+hvVjIMDIQdrxJ6FeZAX9LXMretWHAkLPg6wQHyBsH53IgB8kxheM:Y9/ZkLXM6tGAkLHR537ht

Entry address:
0x1DB2

Entry point:
E8, A0, 37, 00, 00, E9, A4, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 08, F1, 40, 00, 89, 0D, 04, F1, 40, 00, 89, 15, 00, F1, 40, 00, 89, 1D, FC, F0, 40, 00, 89, 35, F8, F0, 40, 00, 89, 3D, F4, F0, 40, 00, 66, 8C, 15, 20, F1, 40, 00, 66, 8C, 0D, 14, F1, 40, 00, 66, 8C, 1D, F0, F0, 40, 00, 66, 8C, 05, EC, F0, 40, 00, 66, 8C, 25, E8, F0, 40, 00, 66, 8C, 2D, E4, F0, 40, 00, 9C, 8F, 05, 18, F1, 40, 00, 8B, 45, 00, A3, 0C, F1, 40, 00, 8B, 45, 04, A3, 10, F1, 40, 00, 8D, 45, 08, A3, 1C, F1, 40...
 
[+]

Entropy:
6.3677

Code size:
37 KB (37,888 bytes)

The file hwatch.exe has been discovered within the following program.

FVD Suite 3.0.2  by flashvideodownloader.org
The setup program uses InstallIQ to bundle additional software including potentially unwanted programs as well as adware. "InstallIQ™, which manages your FVD Suite installation. Additional software may be offered to you via opt-in ads during the installation process."
flashvideodownloader.org
44% remove it
 
Powered by Should I Remove It?

Remove hwatch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.