» DevNetUpdater.exe
Overview
Analysis
File Details
Programs (1)

DevNetUpdater.exe

DevNetUpdater

Dev Net

The application DevNetUpdater.exe by Dev Net has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Iadah Toolbar by DevNet which is a potentially unwanted software program.

File name:

DevNetUpdater.exe

Publisher:

DevNet (signed by Dev Net)

Product:

DevNetUpdater

Description:

Updater DevNet

Version:

1, 0, 0, 1

MD5:

71bf5cedcd648dce390984954636b885

SHA-1:

8530e5366f70eeb141c68f15b6afe429e421f9cf

SHA-256:

ab45c99aa96371fc737efbb577590780390096eda697669f9ea869a6bf32a8c7

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/19/2024 7:57:20 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.GibMedia

16.10.20.19

File size:

50.3 KB (51,536 bytes)

Product version:

1, 0, 0, 1

Original file name:

DevNetUpdater.exe

File type:

Executable application (Win32 EXE)

Language:

French (France)

Common path:

C:\Program Files\devnet\toolbar\devnetupdater.exe

Digital Signature

Signed by:

Dev Net

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

3/12/2010 1:00:00 AM

Valid to:

3/12/2012 12:59:59 AM

Subject:

CN=Dev Net, O=Dev Net, L=CASABLANCA, S=CASABLANCA, C=MA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

7A67B664B3C74854BC7EA36C455205A7

File PE Metadata

Compilation timestamp:

3/4/2011 4:19:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

768:gDhpkKGaFLJD5rUfXLtMajfN+FQQcvh6VnJA6RmnyEPz4KLu:gDRLd5rUmMsFz9RIyERC

Entry address:

0x1598

Entry point:

E8, 5F, 17, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 78, AD, 40, 00, 89, 0D, 74, AD, 40, 00, 89, 15, 70, AD, 40, 00, 89, 1D, 6C, AD, 40, 00, 89, 35, 68, AD, 40, 00, 89, 3D, 64, AD, 40, 00, 66, 8C, 15, 90, AD, 40, 00, 66, 8C, 0D, 84, AD, 40, 00, 66, 8C, 1D, 60, AD, 40, 00, 66, 8C, 05, 5C, AD, 40, 00, 66, 8C, 25, 58, AD, 40, 00, 66, 8C, 2D, 54, AD, 40, 00, 9C, 8F, 05, 88, AD, 40, 00, 8B, 45, 00, A3, 7C, AD, 40, 00, 8B, 45, 04, A3, 80, AD, 40, 00, 8D, 45, 08, A3, 8C, AD, 40... 
[+]

Code size:

25.5 KB (26,112 bytes)

The file DevNetUpdater.exe has been discovered within the following program.

Iadah Toolbar by DevNet

Iadah Toolbar is an advertising-supported web browser toolbar that may modify the browser's home page, search provider and new tab pages.

iadah.co.uk/faq.html

64% remove it

Remove DevNetUpdater.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.