» UpdateAntiMalware.exe
Overview
Analysis
File Details
Programs (1)

UpdateAntiMalware.exe

Update

Security Stronghold LLC

The application UpdateAntiMalware.exe by Security Stronghold has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Stronghold AntiMalware by Security Stronghold which is a potentially unwanted software program.

File name:

Publisher:

Security Stronghold (signed by Security Stronghold LLC)

Product:

Update

Version:

1.0.0.0

MD5:

c5b02e51cc74ec43aa3ecf9b69e46d38

SHA-1:

8a2f3f400cf6ccf33e17b91dace706793dbec3c8

SHA-256:

0c3799f765cf6dfcb2000f30967da3a9e87054965f18ec95e658e6116dd7d062

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/24/2024 11:23:22 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.SecurityStronghold.R

14.11.20.20

File size:

120.9 KB (123,816 bytes)

Product version:

1.0.0.0

Original file name:

UpdateAntiMalware.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\stronghold antimalware\updateantimalware.exe

Digital Signature

Signed by:

Security Stronghold LLC

Authority:

GlobalSign nv-sa

Valid from:

10/15/2013 3:25:31 AM

Valid to:

12/11/2014 9:19:56 PM

Subject:

E=manager@securitystronghold.com, CN=Security Stronghold LLC, O=Security Stronghold LLC, L=Astrakhan, C=RU

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121ACD1A0DCFFA94069288588DCC5FFCF18

File PE Metadata

Compilation timestamp:

4/30/2014 10:32:52 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1536:NlZomhaIOENaLXMRJXqdgEof327LELz/+fOA+RLehL9IjOeVEm73mYrTlpli:bZzhjOWaLXxeePE4B+R6wjOCB72Y1q

Entry address:

0x3778

Entry point:

E8, 9B, 04, 00, 00, E9, 37, FD, FF, FF, 3B, 0D, 28, 80, 40, 00, 75, 02, F3, C3, E9, 1D, 05, 00, 00, 6A, 14, 68, D0, 68, 40, 00, E8, CF, 03, 00, 00, FF, 35, B4, 86, 40, 00, 8B, 35, C4, 50, 40, 00, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, C8, 50, 40, 00, 59, EB, 67, 6A, 08, E8, F9, 05, 00, 00, 59, 83, 65, FC, 00, FF, 35, B4, 86, 40, 00, FF, D6, 89, 45, E4, FF, 35, B0, 86, 40, 00, FF, D6, 59, 59, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, DC, 50, 40, 00, FF, D6, 59... 
[+]

Entropy:

6.7733

Code size:

12.5 KB (12,800 bytes)

The file UpdateAntiMalware.exe has been discovered within the following program.

Stronghold AntiMalware by Security Stronghold

Publisher's description - “Stronghold Antivirus is a lightweight and user-friendly antivirus and antimalware for everyday use both at home and in the office. Unlike other antiviruses it doesn't consume a lot of resources, it doesn't confuse you with difficult to understand windows and complex options.”

www.securitystronghold.com/stronghold-antivirus

65% remove it

Remove UpdateAntiMalware.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.