home

extractnow.exe

ExtractNow

Nathan Moinvaziri

This is installed with ExtractNow.
Publisher:
Nathan Moinvaziri  (signed and verified)

Product:
ExtractNow

Version:
4,8,1,0

MD5:
eecf74efeaf9f70a515db13f868fb2dc

SHA-1:
5bcb6e3b96c952c0f69eb8a949a3eb153c841c1d

SHA-256:
fe7231538a9a9af068d7ea5bcf18d448ade726a57722830b7b6f4c0d6d2796c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:29:15 AM UTC  (today)

File size:
261.5 KB (267,792 bytes)

Product version:
4,8,1,0

Copyright:
Copyright (C) Nathan Moinvaziri 2001-2014

Original file name:
extractnow.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\extractnow\extractnow.exe

Digital Signature
Signed by:
Nathan Moinvaziri

Authority:
COMODO CA Limited

Valid from:
6/1/2013 3:00:00 AM

Valid to:
6/2/2014 2:59:59 AM

Subject:
CN=Nathan Moinvaziri, O=Nathan Moinvaziri, STREET=1538 W Tuckey Ln, L=Phoenix, S=AZ, PostalCode=85015, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3EF6B9FB16BDC6E46FBBCB61827843CF

File PE Metadata
Compilation timestamp:
1/11/2014 9:21:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:WYwLZnKYKJqJWC1mocyMJllbr6pyp/EbNTbO0G3XoSQ:S9rK7C1moc1KYqBOdoS

Entry address:
0x10AC90

Entry point:
60, BE, 00, 60, 4D, 00, 8D, BE, 00, B0, F2, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 3D, 8F, 10, 00, 57, 83, C3, 04, 53, 68, 89, 4C, 03, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Entropy:
7.6943

Code size:
216 KB (221,184 bytes)

The file extractnow.exe has been discovered within the following programs.

ExtractNow  by Nathan Moinvaziri
Some versions use the OpenCandy software library to bundle potentially unwanted software offers during installation.
www.extractnow.com
28% remove it
 
Powered by Should I Remove It?

Scan extractnow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.