home

netsetman.exe

NetSetMan

Ilja Herlein

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NetSetMan’. This is installed with NetSetMan 3.5.3.
Publisher:
Ilja Herlein  (signed and verified)

Product:
NetSetMan

Description:
Network Settings Manager

Version:
3.5.3.0

MD5:
fdd4abf19e60170754637e36c3af1273

SHA-1:
2ee615abfda27d2514bc4f3b2c46c0cb7d963165

SHA-256:
5eb59db9b9528f15bb84f651ebd3622761dcb4293842b404857d6192589d1750

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:54:25 PM UTC  (today)

File size:
4.8 MB (5,052,584 bytes)

Product version:
3

Copyright:
Ilja Herlein | 2004-2013

Original file name:
netsetman.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\netsetman\netsetman.exe

Digital Signature
Signed by:
Ilja Herlein

Authority:
COMODO CA Limited

Valid from:
5/7/2013 6:00:00 AM

Valid to:
5/7/2016 5:59:59 AM

Subject:
CN=Ilja Herlein, OU=Ilja Herlein, O=Ilja Herlein, STREET=Oberwaldstr. 22, L=Karlsruhe, S=DE, PostalCode=76227, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B6B05D57DA80F67F18F3ABFDC8D8CDDC

File PE Metadata
Compilation timestamp:
5/20/2013 4:26:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:MfyJRYgEhmni6abqjAlL6dqAIuwGz7o/DxHZeD9Cgna:MfyJRYThmni6abqjAlL6BIuwGz7obJIo

Entry address:
0x2E89B8

Entry point:
55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, B8, 60, 35, 6D, 00, E8, 3D, 2D, D2, FF, 33, C0, 55, 68, 45, 8C, 6E, 00, 64, FF, 30, 64, 89, 20, A1, A8, 09, 70, 00, BA, 60, 8C, 6E, 00, E8, 60, EA, D1, FF, A1, 7C, 09, 70, 00, 8B, 00, C7, 40, 74, 10, 27, 00, 00, 8D, 55, E8, 33, C0, E8, 70, BE, D1, FF, 8B, 45, E8, 8D, 55, EC, E8, 91, 3D, D3, FF, 8B, 55, EC, 8B, 0D, 04, 0A, 70, 00, 8B, 09, A1, 28, 01, 70, 00, E8, 18, F7, D1, FF, A1, 08, 02, 70, 00, BA, 80, 8C, 6E, 00, E8, 19, EA, D1, FF, B8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.9 MB (3,046,912 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NetSetMan

Command:
C:\Program Files\netsetman\netsetman.exe -h


The file netsetman.exe has been discovered within the following program.

NetSetMan 3.5.3  by Ilja Herlein
www.netsetman.com
About 9% of users remove it
 
Powered by Should I Remove It?

Scan netsetman.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.