home

upd_hlp_sv.exe

upd_hlp_sv

Intronix Test Instruments, Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Apply Updates’.
Publisher:
Intronix  (signed by Intronix Test Instruments, Inc.)

Product:
upd_hlp_sv

Version:
1.00

MD5:
b13cccb2d0a12cd09a4f26a51b79948a

SHA-1:
50c984192118b686930b029ecf2a287d576df496

SHA-256:
9db74643e8384910acd16a1b916e8a667a06edf877033f394fa127ef359a0196

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 11:00:21 PM UTC  (a few moments ago)

File size:
269 KB (275,416 bytes)

Product version:
1.00

Original file name:
upd_hlp_sv.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\upd_hlp_sv.exe

Digital Signature
Signed by:
Intronix Test Instruments, Inc.

Authority:
The USERTRUST Network

Valid from:
10/29/2009 5:00:00 PM

Valid to:
10/29/2012 4:59:59 PM

Subject:
CN="Intronix Test Instruments, Inc.", O="Intronix Test Instruments, Inc.", STREET=2630 E. Mohawk Ln. Unit 144, L=Phoenix, S=AZ, PostalCode=85050, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7B0172E0163AD9E8D78BB26B6245EA71

File PE Metadata
Compilation timestamp:
7/21/2011 7:26:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:6vYboyhJO/J/4FGXo/3v62uEr535Ah1Xn739fxaXsj2+Q:6vYboyhJO/JfXQvPx35MX776f+Q

Entry address:
0x182C

Entry point:
68, D4, 19, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 0D, CA, 39, F8, 94, FD, 15, 46, B5, FE, A7, 48, 84, C7, B6, 76, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 20, 68, 4B, 65, 79, 20, 41, 70, 70, 6C, 79, 55, 70, 64, 61, 74, 65, 73, 00, 6C, 20, 6C, 00, 00, 00, 00, 01, 00, 00, 00, 40, 1E, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, 94, 1E, 40, 00, 08, 90, 40, 00, 00, 00, 00, 00, 78, 48, 96, 03, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.7704

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
32 KB (32,768 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Apply Updates

Command:
C:\windows\upd_hlp_sv.exe


Scan upd_hlp_sv.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.