home

NetgearGearHeadBootstrap.exe

Netgear GearHead Connect

Netgear Inc.

Publisher:
Netgear GearHead  (signed by Netgear Inc.)

Product:
Netgear GearHead Connect

Description:
NetgearGearHeadBootstrap

Version:
2.0.0.0

MD5:
d8f191974e62bbdbe4f2f2b7cd476801

SHA-1:
c1a5ca83753bfd2e9b31d0318ac110657ad8ac1f

SHA-256:
a571b6edd117533fadd6ffff7449a4106fddb51b8c271eefd96dae379bea573e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/12/2025 4:08:13 PM UTC  (today)

File size:
35.7 KB (36,584 bytes)

Product version:
2.0.0.0

Copyright:
Copyright © Netgear

Trademarks:
Netgear

Original file name:
NetgearGearHeadBootstrap.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\eula\netgeargearheadbootstrap.exe

Digital Signature
Signed by:
Netgear Inc.

Authority:
Entrust, Inc.

Valid from:
6/4/2014 2:45:41 PM

Valid to:
6/7/2017 3:54:21 AM

Subject:
CN=Netgear Inc., O=Netgear Inc., L=San Jose, S=California, C=US

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C177A97

File PE Metadata
Compilation timestamp:
10/29/2014 1:51:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:Wvwgg/NBqEJPJNs45YqHJKBh/WEzUoR8NT/KxuUbyf:FPHXPJP5YqHJKBNAoGD+q

Entry address:
0x864E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7071

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
26 KB (26,624 bytes)

The file NetgearGearHeadBootstrap.exe has been seen being distributed by the following URL.

http://gc.gearheadsupport.com/.../netgeargearheadbootstrap.exe

Scan NetgearGearHeadBootstrap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.