home

GlobusVpnAgent.exe

Globus VPN Agent

Globus Partners Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘GlobusVpnAgent’.
Publisher:
Woogable Ltd.  (signed by Globus Partners Ltd.)

Product:
Globus VPN Agent

Version:
1.0

MD5:
cb980886b2b86af5120dd2af3f6e19d9

SHA-1:
4912167b4109810055ed278782159c8658e37268

SHA-256:
44d01deda335f0cf7aa2b6967646684f882fdc0e837226636b94f2b6b637d98a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:28:34 PM UTC  (today)

File size:
1.6 MB (1,685,088 bytes)

Product version:
1.0.2.5

Copyright:
Copyright (C) 2014 Woogable Ltd. All Rights Reserved.

Original file name:
GlobusVpnAgent.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\globus vpn\globusvpnagent.exe

Digital Signature
Signed by:
Globus Partners Ltd.

Authority:
Globus Partners Ltd.

Valid from:
1/29/2014 6:02:41 PM

Valid to:
1/1/2040 3:59:59 AM

Subject:
CN=Globus Partners Ltd.

Issuer:
CN=Globus Partners Ltd.

Serial number:
5322391D79E862AC40CA3AC087F7F6B6

File PE Metadata
Compilation timestamp:
10/10/2014 4:44:13 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:y1XjBm1ovWYfzXXpiaK6t1YGMAajDxGvHIhUskIl5xFZq5E+n6hS:svnLXXpqAuUIhzp5CLn5

Entry address:
0x7FBFE

Entry point:
E8, BB, 5D, 01, 00, E9, 39, FE, FF, FF, 6A, 0C, 68, 70, 91, 50, 00, E8, 8C, 1B, 01, 00, 33, FF, 89, 7D, E4, 33, C0, 8B, 75, 0C, 85, F6, 0F, 95, C0, 85, C0, 75, 18, E8, E7, F3, FF, FF, C7, 00, 16, 00, 00, 00, E8, D6, 00, 01, 00, 83, C8, FF, E9, B6, 00, 00, 00, 56, E8, 6B, 04, 00, 00, 59, 89, 7D, FC, F6, 46, 0C, 40, 75, 71, 56, E8, EF, 5E, 01, 00, 59, 8B, D0, 83, FA, FF, 74, 19, 83, FA, FE, 74, 14, 8B, CA, C1, F9, 05, 83, E0, 1F, C1, E0, 06, 03, 04, 8D, 70, B4, 51, 00, EB, 05, B8, 00, 00, 51, 00, F6, 40, 24...
 
[+]

Entropy:
6.2799

Code size:
901 KB (922,624 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
GlobusVpnAgent

Command:
C:\Program Files\globus vpn\globusvpnagent.exe


Scan GlobusVpnAgent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.