home

Netron.Gozcu.exe

Netron Gozcu

Netron Bilgi Iletisim Teknolojileri San. Ve Tic. A.S:

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Gozcu’.
Publisher:
Netron  (signed by Netron Bilgi Iletisim Teknolojileri San. Ve Tic. A.S:)

Product:
Netron Gozcu

Version:
1.0.1.0

MD5:
a4cebca79150c4d3a2fbc975da4424ac

SHA-1:
703ed3b93239070cbae3e12a719d5086417c1c40

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:09:09 AM UTC  (today)

File size:
481.6 KB (493,160 bytes)

Product version:
1.0.1.0

Original file name:
Netron.Gozcu.exe

File type:
Executable application (Win32 EXE)

Language:
Yansiz Dil

Common path:
C:\Program Files\netron\netron parental control\netron.gozcu.exe

Digital Signature
Signed by:
Netron Bilgi Iletisim Teknolojileri San. Ve Tic. A.S:

Authority:
VeriSign, Inc.

Valid from:
2/9/2006 2:00:00 AM

Valid to:
2/10/2007 1:59:59 AM

Subject:
CN=Netron Bilgi Iletisim Teknolojileri San. Ve Tic. A.S:, OU=NETRON TECHNOLOGY, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Netron Bilgi Iletisim Teknolojileri San. Ve Tic. A.S:, L=Altunizade, S=ISTANBUL, C=TR

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4D65F4DB4F28318F19FF7C884A445B8F

File PE Metadata
Compilation timestamp:
7/27/2006 10:20:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:vM1XjLU4xbf366hVVVVVVVVVVVVVVVVVVVVVVV9FFvQV4UCdoubonM4z+km3S7hm:4UEbf366yGTboM4z+km3S7hpgAFw

Entry address:
0x753AE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
464 KB (475,136 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Gozcu

Command:
C:\Program Files\netron\netron parental control\netron.gozcu.exe


Scan Netron.Gozcu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.