updater21806.exe
Deals Plugin Extension by Engaging Apps (Signed)
Warning 8 antivirus scanners has detected malware in various versions of updater21806.exe.
Overview
updater21806.exe has 2 known versions, the most recent one is 1000.1000.1000.1000. updater21806.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 207.94 KB. It is an authenticode code-signed executable issued to Engaging Apps by the certification authority Thawte. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 1.93 MB with the maximum memory reaching around 6.25 MB.
 Details
|
| File name: | updater21806.exe |
| Publisher: | Innovative Apps |
| Product name: | Deals Plugin Extension |
| Description: | Deals Plugin Extension exe |
| Typical file path: | C:\Documents and Settings\user\Local\updater21806\updater21806.exe |
| Original name: | Deals Plugin Extension.exe |
| Certificate |
| Issued to: | Engaging Apps |
| Authority (CA): | Thawte |
Behaviors
(Note, the behaviors below are for all versions of updater21806.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Updater21806.exe' → C:\Documents and Settings\user\Local\Updater21806\Updater21806.exe /extensionid=21806 /extensionname='Deals Plugin Extension' /chromeid=bbhgoadfgiandmaieopaphefb
Scheduled tasks
- The task 'Updater21806.exe' in the path '\Updater21806.exe'
Malware detections
Based on 40+ industry antivirus scanners, 8 of them detected the following malware.
All file variations of updater21806.exe
