Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

1.3.21.103 55.08%
1.2.183.21 35.29%
1.2.183.9 6.78%
1.2.131.7 2.85%

Relationships

Parent processes
Child processes
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
GetTokenInformation, OpenProcessToken, RegOpenKeyExW
kernel32.dll
GetCurrentProcess, GetProcAddress, SizeofResource, lstrlenW, FindResourceExW, FindResourceW, GetCommandLineW, CloseHandle, FreeLibrary, GetModuleFileNameW, RaiseException, LoadResource, GetModuleHandleW, LockResource, GetFileAttributesExW, VerifyVersionInfoW, LoadLibraryExW, VerSetConditionMask, GetLastError, SetLastError, LocalAlloc, SetStdHandle, SetFilePointer, InterlockedExchange, LoadLibraryA, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, GetVersionExA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, GetCurrentThreadId, InterlockedDecrement, WideCharToMultiByte, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, SetHandleCount, GetFileType, GetStartupInfoA, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, VirtualAlloc, RtlUnwind, Sleep, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetLocaleInfoA, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode, FlushFileBuffers, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, SystemTimeToFileTime, GetSystemTime, CompareFileTime
ole32.dll
CoCreateGuid

GoogleUpdate.exe

Google Update by Google Inc (Signed)

Remove GoogleUpdate.exe
Version:   1.3.21.103
MD5:   506708142bc63daba64f2d3ad1dcd5bf
SHA1:   d30e8c7543adbc801d675068530b57d75cabb13f
SHA256:   9c36a08d9e7932ff4da7b5f24e6b42c92f28685b8abe964c870e8d7670fd531a

What is GoogleUpdate.exe?

Google products use a process called Google Update to periodically check for updates. This process sends information, such as version number, language, operating system, and other installation or update-related details, back to Google servers. Google Installer is a program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.

About GoogleUpdate.exe (from Google Inc)

“To make sure that you're protected by the latest security updates, Google Chrome automatically updates whenever it detects that a new version of the browser is available. The update process happens in”

DetailsDetails

File name:googleupdate.exe
Publisher:Google Inc.
Product name:Google Update
Description:Google Installer
Typical file path:C:\users\user\appdata\local\google\update\googleupdate.exe
File version:1.3.21.103
Size:113.91 KB (116,648 bytes)
Certificate
Issued to:Google Inc
Authority (CA):VeriSign
Effective date:Monday, June 18, 2007
Expiration date:Friday, June 18, 2010
Digital DNA
Entropy:5.811342
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Google Chrome VMware ThinApp
 VMware, Inc.
5% remove
“Eliminate application conflicts by isolating applications from each other and the underlying OS into a single executable file that can be easily deployed to many endpoints. VMware® ThinApp® accelerates application deployment and simplifies application migration with agentless application virtualization. Package an entire application and its settings into a single .MSI or .EXE executable that can be deployed to many Windows operating env...”

BehaviorsBehaviors

Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Google Update' → "C:\users\user\appdata\Local\Google\Update\GoogleUpdate.exe" /c
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • gupdate1c9a4adeb791009
Scheduled tasks
  • The task 'GoogleUpdateTaskUserS-1-5-21-4040762489-3244682431-1063801501-1001UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4040762489-3244682431-1063801501-1001UA'
  • The job 'GoogleUpdateTaskUserS-1-5-21-4040762489-3244682431-1063801501-1001Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4040762489-3244682431-1063801501-1001Core'
  • The task 'GoogleUpdateTaskUserS-1-5-21-3286019870-1475449969-3554601053-1000UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3286019870-1475449969-3554601053-1000UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-3286019870-1475449969-3554601053-1000Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3286019870-1475449969-3554601053-1000Core'
  • The job 'GoogleUpdateTaskUserS-1-5-21-3305648521-2958999256-107983701-1002UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3305648521-2958999256-107983701-1002UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-3305648521-2958999256-107983701-1002Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3305648521-2958999256-107983701-1002Core'
  • The job 'GoogleUpdateTaskUserS-1-5-21-3644473725-3640809915-1163733049-1000UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3644473725-3640809915-1163733049-1000UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-3644473725-3640809915-1163733049-1000Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3644473725-3640809915-1163733049-1000Core'
  • The task 'GoogleUpdateTaskUserS-1-5-21-780999901-2708500014-2551514655-1000UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-780999901-2708500014-2551514655-1000UA'
  • The job 'GoogleUpdateTaskUserS-1-5-21-780999901-2708500014-2551514655-1000Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-780999901-2708500014-2551514655-1000Core'
  • The job 'GoogleUpdateTaskMachineUA1cf876f52574e6a' runs daily in the path '\GoogleUpdateTaskMachineUA1cf876f52574e6a'
  • The job 'GoogleUpdateTaskUserS-1-5-21-1714702166-3828736240-2364637561-1001UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-1714702166-3828736240-2364637561-1001UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-1714702166-3828736240-2364637561-1001Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-1714702166-3828736240-2364637561-1001Core'
  • The job 'GoogleUpdateTaskUserS-1-5-21-4213831199-1925155440-1856091304-1000UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4213831199-1925155440-1856091304-1000UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-4213831199-1925155440-1856091304-1000Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4213831199-1925155440-1856091304-1000Core'
  • The job 'GoogleUpdateTaskUserS-1-5-21-1467336047-3671384462-808872918-1001UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-1467336047-3671384462-808872918-1001UA'
  • The task 'GoogleUpdateTaskUserS-1-5-21-1467336047-3671384462-808872918-1001Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-1467336047-3671384462-808872918-1001Core'
  • The task 'GoogleUpdateTaskUserS-1-5-21-4143023575-1045065631-1360249355-1001UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4143023575-1045065631-1360249355-1001UA'
  • The job 'GoogleUpdateTaskUserS-1-5-21-4143023575-1045065631-1360249355-1001Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-4143023575-1045065631-1360249355-1001Core'
  • The task 'GoogleUpdateTaskUserS-1-5-21-3518954986-860323-3029074054-1000UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3518954986-860323-3029074054-1000UA'
  • The job 'GoogleUpdateTaskUserS-1-5-21-3518954986-860323-3029074054-1000Core' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-3518954986-860323-3029074054-1000Core'
  • The job 'GoogleUpdateTaskUserS-1-5-21-872894108-2829445789-3937978749-1001UA' runs daily in the path '\GoogleUpdateTaskUserS-1-5-21-872894108-2829445789-3937978749-1001UA'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
  • Login entry path 'L:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1cecbd45b3a8213'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce84615a736d32.job'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cea9d5293c17e2.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1ce7aa369f8ada6'
  • Login entry path '\GoogleUpdateTaskMachineCore1ca5db9f0198650'
  • Login entry path '\GoogleUpdateTaskMachineCore1cce6a17e13e8fd'
  • Login entry path '\GoogleUpdateTaskMachineCore1cc92a7b39f6800'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1ce05c553efaab8.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1cdc58d2accdb9c'
  • Login entry path 'C:\WINXP\Tasks\GoogleUpdateTaskMachineCore1ce054f10035172.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1cd9a8a6809015d'
  • Login entry path 'C:\WINDOWS.0\Tasks\GoogleUpdateTaskMachineCore.job'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cde6586d81c3c6.job'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cc71024b1a2f00.job'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd60417c1ef31a.job'
  • Login entry path 'C:\WINXP\Tasks\GoogleUpdateTaskMachineCore.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1cd08eb84d00124'
  • Login entry path 'D:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job'
  • Login entry path '\GoogleUpdateTaskMachineCore1cd6a67648c3f42'
  • Login entry path 'D:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd628cca255480.job'
  • Login entry path 'C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cd1a82bee2d0fe.job'
Network connections
  • [UDP] listens on port 1121

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.49062909%
    0.028634%
    Kernel CPU:0.21301868%
    0.013761%
    User CPU:0.27761042%
    0.014873%
    Kernel CPU time:110,021 ms/min
    100,923,805ms/min
    CPU cycles:44,496/sec
    17,470,203/sec
    Context switches:55/sec
    284/sec
    Memory
    Private memory:4.38 MB
    21.59 MB
    Private (maximum):5.5 MB
    Private (minimum):3.49 MB
    Non-paged memory:4.38 MB
    21.59 MB
    Virtual memory:65.56 MB
    140.96 MB
    Virtual memory (peak):70.91 MB
    169.69 MB
    Working set:2.99 MB
    18.61 MB
    Working set (peak):7.82 MB
    37.95 MB
    Page faults:5,139/min
    2,039/min
    I/O
    I/O read transfer:92.62 KB/sec
    1.02 MB/min
    I/O read operations:2/sec
    343/min
    I/O write transfer:45.94 KB/sec
    274.99 KB/min
    I/O write operations:2/sec
    227/min
    I/O other transfer:127 Bytes/sec
    448.09 KB/min
    I/O other operations:10/sec
    1,671/min
    Resource allocations
    Threads:6
    12
    Handles:155
    600
    GUI GDI count:8
    103
    GUI GDI peak:10
    142
    GUI USER count:4
    49
    GUI USER peak:4
    71

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command lines:
    • "C:\Program Files\google\update\googleupdate.exe" /c
    • "C:\Program Files\google\update\googleupdate.exe" /ua /installsource scheduler
    • "C:\Program Files\google\update\googleupdate.exe" /svc
    • C:\users\user\appdata\local\google\update\googleupdate.exe /c
    • "C:\users\user\appdata\local\google\update\googleupdate.exe" /c
    • "C:\documents and settings\ruben baptista\configuración local\datos de programa\google\update\googleupdate.exe" /c
    • C:\users\user\appdata\local\google\update\googleupdate.exe /ua /installsource scheduler
    • (12 more)
    Owner:User
    Windows Service
    Service name:gupdate
    Display name:gupdate1c9a4adeb791009
    Description:“Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it.”
    Type:Win32OwnProcess
    Parent processes:

    ResourcesThreads

    Averages
     
    GoogleUpdate.exe (main module)
    Total CPU:0.02407725%
    0.272967%
    Kernel CPU:0.02190908%
    0.107585%
    User CPU:0.00216817%
    0.165382%
    CPU cycles:517,817/sec
    5,741,424/sec
    Context switches:1/sec
    79/sec
    Memory:120 KB
    1.16 MB
    ntdll.dll
    Total CPU:0.01220168%
    Kernel CPU:0.01142604%
    User CPU:0.00077564%
    CPU cycles:174,321/sec
    Memory:1.66 MB
    goopdate.dll (Google Update by Google)
    Total CPU:0.00002752%
    Kernel CPU:0.00002752%
    User CPU:0.00000000%
    CPU cycles:46/sec
    Memory:832 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 68.00%
    Windows 7 Ultimate 17.50%
    Windows 7 Professional 6.00%
    Microsoft Windows XP 6.00%
    Windows Vista Home Premium 2.50%

    Distribution by countryDistribution by country

    United States installs about 60.91% of Google Update.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 31.39%
    Toshiba 20.44%
    Hewlett-Packard 17.52%
    Acer 10.95%
    Sony 6.57%
    ASUS 5.11%
    Sahara 2.92%
    GIGABYTE 2.55%
    Alienware 1.82%
    Samsung 0.73%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE