home

NetgearGearHeadBootstrap.exe

Netgear GearHead Connect

Netgear Inc.

Publisher:
Netgear GearHead  (signed by Netgear Inc.)

Product:
Netgear GearHead Connect

Description:
NetgearBootstrap

Version:
2.0.0.0

MD5:
8a7a8f78f97ffbd2f7b0f0523d47940f

SHA-1:
c5ae2a29774d849322814f0bd52c69d8a72dac12

SHA-256:
9c43a12bb023aae7c2017ecf731516222230be995a31a3d96d56ea942e2a99e6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 2:49:23 PM UTC  (today)

File size:
32.7 KB (33,512 bytes)

Product version:
2.0.0.0

Copyright:
Copyright © Netgear

Trademarks:
Neatgear

Original file name:
NetgearGearHeadBootstrap.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\eula\netgeargearheadbootstrap.exe

Digital Signature
Signed by:
Netgear Inc.

Authority:
Entrust, Inc.

Valid from:
6/4/2014 5:45:41 PM

Valid to:
6/7/2017 6:54:21 AM

Subject:
CN=Netgear Inc., O=Netgear Inc., L=San Jose, S=California, C=US

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C177A97

File PE Metadata
Compilation timestamp:
4/23/2015 3:02:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:XFluRHc/y6bdx5wOayYE4oS0vDIFpYR8NYO/KxuUbd8:XFyHcZxiOtYEdS0vmYGR+6

Entry address:
0x7A1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7952

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
23 KB (23,552 bytes)

The file NetgearGearHeadBootstrap.exe has been seen being distributed by the following URL.

http://gc.gearheadsupport.com/.../netgeargearheadbootstrap.exe

Scan NetgearGearHeadBootstrap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.