home

iidxwatch.exe

Net iD Watch

SecMaker AB

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Net iD Watch’.
Publisher:
SecMaker AB  (signed and verified)

Product:
Net iD Watch

Version:
5, 3, 0, 28

MD5:
6a523ca3bb8ad104a3207998076a2e48

SHA-1:
0d1ba631814f836daaa99d1bc7a166f6f73e7c86

SHA-256:
73f5a7fc0630634ee9205f24ddccd86d2fd37423c56e5e59925477a11c98fe93

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 4:56:28 PM UTC  (today)

File size:
193.3 KB (197,944 bytes)

Product version:
5, 3, 0, 0

Copyright:
© SecMaker AB 2003-2010

Original file name:
iidxwatch.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
SecMaker AB

Authority:
VeriSign, Inc.

Valid from:
6/15/2009 2:00:00 AM

Valid to:
7/4/2010 1:59:59 AM

Subject:
CN=SecMaker AB, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SecMaker AB, L=Nacka, S=Stockholm, C=SE

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
09419918068CBFDD3414BA2327DD894C

File PE Metadata
Compilation timestamp:
2/4/2010 11:20:20 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:AqBCtxeFaFJsp6HfcQoV+dyDRMvnmbCBTJLoQNfJJKrsPorT99C0zdH6:AqsGSJW6kbsyDGfrBTSQF2T99C0zd6

Entry address:
0x1955D

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 1C, 42, 00, 68, 88, D2, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, F0, 11, 42, 00, 33, D2, 8A, D4, 89, 15, B4, DE, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, B0, DE, 42, 00, C1, E1, 08, 03, CA, 89, 0D, AC, DE, 42, 00, C1, E8, 10, A3, A8, DE, 42, 00, 6A, 01, E8, 22, 45, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, EF, 14, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
128 KB (131,072 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Net iD Watch

Command:
"C:\program\net id\iidxwatch.exe" -b "net id watch"


Scan iidxwatch.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.