Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

fc3e3	35.29%
a9462	17.65%
8ec33	17.65%
e29bf	5.88%
fceed	17.65%
031c4	5.88%

(Note, Genieo Innovation LTD publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Child process

framework_setup.gen (Genieo Platform by Genieo Innovation LTD)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegEnumValueA, RegQueryInfoKeyA, RegCloseKey, CryptGetHashParam, CryptHashData, CryptAcquireContextW, CryptReleaseContext, CryptCreateHash, CryptDestroyHash

kernel32.dll

CreateDirectoryW, DeleteFileW, GetFileSize, SetFilePointer, WriteFile, InitializeCriticalSection, CopyFileW, LeaveCriticalSection, CreateFileW, FlushFileBuffers, EnterCriticalSection, GetLocalTime, DeleteCriticalSection, CloseHandle, InterlockedDecrement, CreateSemaphoreW, WaitForSingleObject, ReleaseSemaphore, GetPrivateProfileStringW, GetTickCount, Sleep, GetTempPathW, CreateThread, OpenProcess, TerminateProcess, GetLastError, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, GetCurrentProcessId, GetModuleHandleA, GetPrivateProfileIntW, GetExitCodeProcess, lstrlenA, MultiByteToWideChar, WaitForMultipleObjects, HeapAlloc, HeapFree, GetModuleHandleW, GetProcessHeap, GetVersionExW, GetProcAddress, GetSystemInfo, SetLastError, WideCharToMultiByte, lstrlenW, TerminateThread, CreateProcessW, GetSystemTimeAsFileTime, GetStartupInfoW, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, GetCurrentThreadId, RtlUnwind, RaiseException, HeapCreate, VirtualFree, VirtualAlloc, GetModuleFileNameW, HeapSize, ExitProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, ReadFile, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, QueryPerformanceCounter, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, InitializeCriticalSectionAndSpinCount, SetStdHandle, LoadLibraryA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, CreateFileA, HeapReAlloc

ole32.dll

CoCreateGuid, StringFromGUID2, CoUninitialize, CoInitialize, CoCreateInstance

shell32.dll

ShellExecuteW, ShellExecuteExW

shlwapi.dll

SHSetValueA, SHRegGetUSValueW, SHGetValueW, SHSetValueW, StrTrimA, SHRegGetUSValueA

user32.dll

GetSystemMetrics, SendMessageW, FindWindowW, PostMessageW, GetLastInputInfo, wsprintfW

wininet.dll

InternetCloseHandle, HttpOpenRequestW, HttpQueryInfoW, InternetSetOptionW, HttpSendRequestW, InternetConnectW, InternetCrackUrlW, InternetQueryDataAvailable, InternetReadFile, InternetOpenW

genupdater.exe

By Genieo Innovation LTD (Signed)

Remove genupdater.exe

MD5:	fc3e34d9fa7bec7d64e0dce37332b5dd
SHA1:	ae419d9a25530f26b727917cb12654395ce3377e
SHA256:	68ffad6b634b120d32e0f66ca10a4448e98ddce043bbca90875461d616e237f4

What is genupdater.exe?

Genieo Updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found. Genieo is a web browser framework that tries to automatically discover, manage and filter feeds according to users’ topics of interest.

About genupdater.exe (from Genieo Innovation LTD)

“Genieo Software is a desktop application which automatically generates a personal start page with relevant content and ad-hock personalized news widgets. Unlike other start pages, Genieo Software does”

Details

File name:	genupdater.exe
Typical file path:	C:\users\user\appdata\roaming\genieo\application\updater\bin\genupdater.exe
Size:	283.34 KB (290,144 bytes)
Certificate
Issued to:	Genieo Innovation LTD
Authority (CA):	Thawte
Expiration date:	Friday, February 7, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'GenieoUpdaterService' → "C:\users\user\appdata\Roaming\Genieo\Application\Updater\bin\genupdater.exe" -wait 5

Network connections

[TCP] s3-1-w.amazonaws.com (72.21.195.15:80)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.03770988%	0.028634%
Kernel CPU:	0.02566621%	0.013761%
User CPU:	0.01204367%	0.014873%
Kernel CPU time:	85 ms/min	100,923,805ms/min
Memory
Private memory:	1.49 MB	21.59 MB
Private (maximum):	321 KB
Private (minimum):	302 KB
Non-paged memory:	1.49 MB	21.59 MB
Virtual memory:	50.03 MB	140.96 MB
Virtual memory (peak):	57.1 MB	169.69 MB
Working set:	334 KB	18.61 MB
Working set (peak):	6.91 MB	37.95 MB
Resource allocations
Threads:	2	12
Handles:	92	600
GUI GDI count:	9	103
GUI GDI peak:	9	142
GUI USER count:	2	49
GUI USER peak:	3	71

Process properties

Integrety level:	High
Platform:	32-bit
Command lines:	"C:\users\user\appdata\roaming\genieo\application\updater\bin\genupdater.exe" -wait 360 "C:\Documents and Settings\user\Application data\genieo\application\updater\bin\genupdater.exe" -wait 360 "C:\users\user\appdata\roaming\genieo\application\updater\bin\genupdater.exe"
Owner:	User
Parent process:	genupdater.exe (by Genieo Innovation LTD)

Threads