» CIDGlobalLight.exe
Overview
Analysis
File Details

CIDGlobalLight.exe

CallingID

The application CIDGlobalLight.exe by CallingID has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

CIDGlobalLight.exe

Publisher:

CallingID Ltd. (signed by CallingID)

Product:

CallingID

Version:

2.0.0.255

MD5:

4e2d539451fca7d9276737e8230aa752

SHA-1:

c5f69c05ba13bc658fe3a964347a00ac1dd36dfc

SHA-256:

de408df54e23e97cc103b217258a40c10cd2da4a67726b2cc5c44ec13690decd

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/24/2024 10:25:14 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.CallingID (L)

16.10.12.12

File size:

1.2 MB (1,264,151 bytes)

Product version:

2.0.0.255

Original file name:

CIDGlobalLight.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\ask.com\callingidsdk\cidgloballight.exe

Digital Signature

Signed by:

CallingID

Authority:

Thawte, Inc.

Valid from:

8/15/2011 8:00:00 AM

Valid to:

11/13/2012 7:59:59 AM

Subject:

CN=CallingID, O=CallingID, L=Haifa, S=Haifa, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

26E20488F6B0D3EA5423172DF40D3040

File PE Metadata

Compilation timestamp:

10/3/2012 10:00:28 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:1+Om5vEuV5KApknxrgqnFUyyjvHkqrEs5dTJz1rEH7Q:UXEyTCnGjTJz

Entry address:

0xAAF66

Entry point:

E9, 62, FD, F5, FF, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 0C, A1, D8, E4, 4F, 00, 33, C5, 89, 45, FC, 56, 33, F6, 3B, DE, 57, 75, 1E, E8, 05, D2, FF, FF, 6A, 16, 5F, 56, 56, 56, 56, 56, 89, 38, E8, 74, F8, FF, FF, 83, C4, 14, 8B, C7, E9, 40, 01, 00, 00, FF, 75, 08, 53, E8, 96, CB, FF, FF, 3B, 45, 08, 59, 59, 72, 05, 66, 89, 33, EB, CD, 8B, 55, 0C, 8B, 02, 8B, 48, 14, 3B, CE, 75, 2A, 66, 39, 33, 8B, C3, 74, 1C, 0F, B7, 08, 66, 83, F9, 61, 72, 0C, 66, 83, F9, 7A, 77, 06, 83, C1, E0, 66, 89, 08, 40, 40, 66... 
[+]

Entropy:

6.5413

Packer / compiler:

Xtreme-Protector v1.05

Code size:

808 KB (827,392 bytes)

Remove CIDGlobalLight.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.