home

MegaFonInternetService.exe

MegaFon Internet

RooX Solutions LLC

It runs as a separate (within the context of its own process) windows Service named “MegaFon Internet Service”.
Publisher:
RooX  (signed by RooX Solutions LLC)

Product:
MegaFon Internet

Description:
MegaFon Internet Management Service

Version:
1.0.1.5192

MD5:
2ebe18b3b32949d4ba9fffb94462184c

SHA-1:
f355a523540b39b6668f841a54a3e2a478929036

SHA-256:
03b068bb271b65d04cf0145442d7416bd20a21999f7911eefb65562b017474f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:10:23 AM UTC  (today)

File size:
813.1 KB (832,656 bytes)

Product version:
1.0.1.5192

Copyright:
(c) RooX. All rights reserved.

Original file name:
MegaFonInternetService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\megafon\megafon internet\megafoninternetservice.exe

Digital Signature
Signed by:
RooX Solutions LLC

Authority:
COMODO CA Limited

Valid from:
6/1/2012 4:00:00 AM

Valid to:
6/2/2013 3:59:59 AM

Subject:
CN=RooX Solutions LLC, O=RooX Solutions LLC, STREET="Rusakovskaya ul, d 13", L=Moscow, S=Outside United States, PostalCode=107140, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008B7CC84331D8E5621BD9027BE3425769

File PE Metadata
Compilation timestamp:
10/8/2012 5:29:15 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:yfwhw/V0Q2p7wwZlpetJJVC0dQF601/4KRDbHE/PZS:yYhw/VK9lpetJJVC0dQF6czRDbHE/PZS

Entry address:
0x1FF50

Entry point:
E8, A4, 05, 00, 00, E9, 63, FD, FF, FF, 6A, 14, 68, 30, FB, 48, 00, E8, EA, 04, 00, 00, FF, 35, A8, 63, 4B, 00, 8B, 35, 64, 55, 48, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, C0, 55, 48, 00, 59, EB, 64, 6A, 08, E8, 11, 06, 00, 00, 59, 83, 65, FC, 00, FF, 35, A8, 63, 4B, 00, FF, D6, 89, 45, E4, FF, 35, A4, 63, 4B, 00, FF, D6, 89, 45, E0, 8D, 45, E0, 50, 8D, 45, E4, 50, FF, 75, 08, 8B, 35, 68, 55, 48, 00, FF, D6, 50, E8, D7, 05, 00, 00, 83, C4, 0C, 89, 45, DC, FF, 75, E4, FF, D6, A3, A8...
 
[+]

Code size:
527 KB (539,648 bytes)

Service
Display name:
MegaFon Internet Service

Description:
MegaFon Internet Management Service

Type:
Win32OwnProcess


Scan MegaFonInternetService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.