home

globalupdatecrashhandler.exe

globalUpdate Update

globalUpdate

The application globalupdatecrashhandler.exe has been detected as a potentially unwanted program by 20 anti-malware scanners.
Publisher:
globalUpdate

Product:
globalUpdate Update

Version:
1.3.25.0

MD5:
e90ca78a40b1d1b3ca7f5f9bed0938fc

SHA-1:
0e448ed276af42329c2f8be0168250567fbe92f1

SHA-256:
7cde5102468cca0c6a87d532070294f2c776d607313571a7694230eca394ab6b

Scanner detections:
20 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 12:56:31 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Agent.POG
5702813

Agnitum Outpost
PUA.Boxore
7.1.1

Avira AntiVirus
PUA/Glup.68608
8.3.1.6

Arcabit
Adware.Agent.POG
1.0.0.425

Bitdefender
Adware.Agent.POG
1.0.20.890

Dr.Web
Adware.Boxore.5
9.0.1.05190

Emsisoft Anti-Malware
Adware.Agent.POG
10.0.0.5366

ESET NOD32
Win32/AlteredSoftware.F potentially unwanted application
7.0.302.0

F-Secure
Adware.Agent.POG
5.14.151

G Data
Adware.Agent.POG
15.6.25

IKARUS anti.virus
not-a-virus:RiskTool.GlobalUpdate
t3scan.1.9.5.0

K7 AntiVirus
Riskware
13.205.16384

Kaspersky
not-a-virus:RiskTool.Win32.GlobalUpdate
15.0.0.543

Malwarebytes
PUP.Optional.ModGoog
v2015.06.27.05

MicroWorld eScan
Adware.Agent.POG
16.0.0.534

NANO AntiVirus
Riskware.Win32.GlobalUpdate.dqjgkp
0.30.24.2266

Norman
Adware.Agent.POG
02.06.2015 14:23:46

nProtect
Adware.Agent.POG
15.06.26.01

VIPRE Antivirus
Threat.4150696
40830

Zillya! Antivirus
Trojan.CPEX.Win32.16017
2.0.0.2255

File size:
67 KB (68,608 bytes)

Product version:
1.3.25.0

Copyright:
Copyright 2007-2010 globalupdate

Original file name:
globalupdate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\globalupdatecrashhandler.exe

File PE Metadata
Compilation timestamp:
4/30/2015 6:40:43 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:2OoKeZJ81NzLJ1mxUimx2Pz12wbUOYhETuk7gY3EDfYnA8MvCvL90PGiD23:dob8NzL6Xe2LZoHGukUwA8ZvL90+i63

Entry address:
0x47BD

Entry point:
E8, 6D, 1E, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 1C, A7, 40, 00, FF, 15, 74, B0, 40, 00, 85, C0, 75, 18, 56, E8, 90, 01, 00, 00, 8B, F0, FF, 15, 3C, B0, 40, 00, 50, E8, 40, 01, 00, 00, 59, 89, 06, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, 94, B0, 40, 00, 57, FF, 35, 68, AD, 40, 00, FF, D6, FF, 35, 64, AD, 40, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8...
 
[+]

Entropy:
6.0429

Code size:
32 KB (32,768 bytes)

Remove globalupdatecrashhandler.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.