home

netrabdecrypt.exe

NetrabExt Module

深圳市巨石安全科技有限公司

Publisher:
HugeStone SZ  (signed by 深圳市巨石安全科技有限公司)

Product:
NetrabExt Module

Description:
ENCRYPTION SOFTWARE. MANUAL DECLASSIFIED.

Version:
2, 0, 3, 0

MD5:
2a1a1ed6e7db6fb8efcc01be78e33a64

SHA-1:
4d38f66cc5a542b7fd5017c6e6ae012d0124a482

SHA-256:
dbbd8a32c1e3b62e5b60f3fbc2281e9ba7daee6cf5497997efc15e1ec3680471

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/16/2025 11:02:05 PM UTC  (a few moments ago)

File size:
584.9 KB (598,936 bytes)

Product version:
2, 0, 3, 0

Copyright:
HugeStone Safty Software Inc. All rights reserved. 2008

Original file name:
NetrabExt.DLL

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\delayclient\netrabdecrypt.exe

Digital Signature
Signed by:
深圳市巨石安全科技有限公司

Authority:
WoSign CA Limited

Valid from:
8/21/2015 10:59:41 AM

Valid to:
9/21/2017 10:59:41 AM

Subject:
CN=深圳市巨石安全科技有限公司, E=416721361@qq.com, O=深圳市巨石安全科技有限公司, L=深圳市, S=广东省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
60D0895DC6E9B5B04CA1C259D240647B

File PE Metadata
Compilation timestamp:
12/4/2014 3:01:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0x34B0C

Entry point:
6A, 74, 68, 88, 88, 44, 00, E8, 10, 05, 00, 00, 33, FF, 89, 7D, E0, 57, 8B, 1D, 38, C2, 43, 00, FF, D3, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 02, FF, 15, 54, C9, 43, 00, 59, 83, 0D, E0, 2E, 45, 00, FF, 83...
 
[+]

Entropy:
6.6420

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
236 KB (241,664 bytes)

Scan netrabdecrypt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.