home

MNS.exe

Mobile Net Switch

RH Computing

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MNS’.
Publisher:
RH Computing  (signed and verified)

Product:
Mobile Net Switch

Description:
Mobile Net Switch - The Network Connection Manager | KPMG LLP

Version:
4.02

MD5:
671c16f34858f4d69a47851e47ecabfc

SHA-1:
492dd35c9df7a99f117b04c5d560f889f62a3841

SHA-256:
ee6db4c76e399c85840fbf08201f9def2112d847e81d0d2b1eaec5a0417ad2f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:24:17 PM UTC  (today)

File size:
4 MB (4,237,472 bytes)

Product version:
4.02

Copyright:
RH Computing, The Netherlands

Trademarks:
Copyrights RH Computing, The Netherlands. All rights reserved.

Original file name:
MNS.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mobile net switch\mns.exe

Digital Signature
Signed by:
RH Computing

Authority:
COMODO CA Limited

Valid from:
10/14/2012 8:00:00 PM

Valid to:
10/15/2017 7:59:59 PM

Subject:
CN=RH Computing, OU=IT, O=RH Computing, STREET=Schuilenburgstraat 60, L=Zwolle, S=Overijssel, PostalCode=8043WR, C=NL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
33FEA798FEECDE3BE1C0FAEBCD0E88B7

File PE Metadata
Compilation timestamp:
5/1/2014 4:02:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:xITtrK/GP6s8NJPH93X6/Dcysw3NLccuZP:eTdK/GP6s8NJPH93X6/Dcys2NLccUP

Entry address:
0x23F94

Entry point:
68, 10, 59, 44, 00, E8, F0, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, D4, 7E, 23, 63, 78, A5, 4C, 48, 9D, B5, 23, E7, E9, 44, 2E, 40, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 43, 4E, 53, 00, 00, 00, 00, 00, 00, 9D, C5, 05, F8, 9D, C5, 05, B0, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 3D, 00, 00, 00, E7, 2F, 36, E5, 9C, FB, 4A, 4A, 93, 85, 27, DC, BD, 8D, 2D, ED, 01, 00, 00, 00, 90, 00, 00, 00, A0, 00, 00, 00, 01, 00, 00, 00...
 
[+]

Entropy:
6.0867

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
3.9 MB (4,050,944 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MNS

Command:
C:\Program Files\mobile net switch\mns.exe


Scan MNS.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.