home

extractnow.exe

ExtractNow

Nathan Moinvaziri

This is installed with ExtractNow.
Publisher:
Nathan Moinvaziri  (signed and verified)

Product:
ExtractNow

Version:
4,8,0,0

MD5:
2f6e55c0b6618ca8d8eb0e1ff74dd756

SHA-1:
ed07fc6ba3de8b83442d175a2eddca64fe792966

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 7:26:16 AM UTC  (today)

File size:
259 KB (265,232 bytes)

Product version:
4,8,0,0

Copyright:
Copyright (C) Nathan Moinvaziri 2001-2013

Original file name:
extractnow.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\extractnow\extractnow.exe

Digital Signature
Signed by:
Nathan Moinvaziri

Authority:
COMODO CA Limited

Valid from:
6/1/2013 2:00:00 AM

Valid to:
6/2/2014 1:59:59 AM

Subject:
CN=Nathan Moinvaziri, O=Nathan Moinvaziri, STREET=1538 W Tuckey Ln, L=Phoenix, S=AZ, PostalCode=85015, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3EF6B9FB16BDC6E46FBBCB61827843CF

File PE Metadata
Compilation timestamp:
8/3/2013 7:59:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:VtOF7jW083BXi9TAfRM1KMRBFiAOV8OLAc3n54wAgcKsFvM/tiZakTOi1J9TrFsT:eE0832UfROKM3Q4Zz4Fimi11PPoS8

Entry address:
0x107340

Entry point:
60, BE, 00, 30, 4D, 00, 8D, BE, 00, E0, F2, FF, 57, 89, E5, 8D, 9C, 24, 80, C1, FF, FF, 31, C0, 50, 39, DC, 75, FB, 46, 46, 53, 68, 1C, 5D, 10, 00, 57, 83, C3, 04, 53, 68, 36, 43, 03, 00, 56, 83, C3, 04, 53, 50, C7, 03, 03, 00, 02, 00, 90, 90, 90, 90, 90, 55, 57, 56, 53, 83, EC, 7C, 8B, 94, 24, 90, 00, 00, 00, C7, 44, 24, 74, 00, 00, 00, 00, C6, 44, 24, 73, 00, 8B, AC, 24, 9C, 00, 00, 00, 8D, 42, 04, 89, 44, 24, 78, B8, 01, 00, 00, 00, 0F, B6, 4A, 02, 89, C3, D3, E3, 89, D9, 49, 89, 4C, 24, 6C, 0F, B6, 4A...
 
[+]

Code size:
212 KB (217,088 bytes)

The file extractnow.exe has been discovered within the following program.

ExtractNow  by Nathan Moinvaziri
Some versions use the OpenCandy software library to bundle potentially unwanted software offers during installation.
www.extractnow.com
28% remove it
 
Powered by Should I Remove It?

Scan extractnow.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.