NEService.exe
NetExtender Windows NT Service by SonicWALL Inc. (Signed)
| Version: | 6, 0, 176, 1 |
| MD5: | 44be1212dc0ba5e72bfd6bf6691b7540 |
| SHA1: | b15b6d02428c579abab31d7892942b4c5ee928d6 |
Overview
neservice.exe runs as a service under the name SonicWALL NetExtender Service (SONICWALL_NetExtender) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program SonicWALL SSL-VPN NetExtender published by SonicWALL, Inc.. The file is digitally signed by SonicWALL Inc. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Ultimate (6.0.6002.131072).
Details
| File name: | neservice.exe |
| Publisher: | SonicWALL Inc. |
| Product name: | NetExtender Windows NT Service |
| Description: | SonicWALL NetExtender Windows NT Service |
| Typical file path: | C:\Program Files\sonicwall\ssl-vpn\netextender\neservice.exe |
| File version: | 6, 0, 176, 1 |
| Size: | 323.03 KB (330,784 bytes) |
| Build date: | 4/12/2012 11:37 PM |
| Certificate |
| Issued to: | SonicWALL Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, March 6, 2012 |
| Expiration date: | Saturday, March 7, 2015 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“SonicWALL NetExtender is a transparent software application for Windows users that enables remote users to securely connect to the remote network. With NetExtender, remote users can securely run any application on the remote network. Users can upload and download files, mount network drives, and access resources in the same way as if they were on the local network. NetExtender acts as an IP-level mechanism provided by the virtual interf...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'SONICWALL_NetExtender' (SonicWALL NetExtender Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00065037% | |
| Kernel CPU: | 0.00016816% | |
| User CPU: | 0.00048221% | |
| Kernel CPU time: | 234 ms/min | |
| CPU cycles: | 1,211,204/sec | |
| Memory |
| Private memory: | 4.86 MB | |
| Private (maximum): | 6.03 MB | |
| Private (minimum): | 956 KB | |
| Non-paged memory: | 4.86 MB | |
| Virtual memory: | 76.18 MB | |
| Virtual memory (peak): | 87.59 MB | |
| Working set: | 1.05 MB | |
| Working set (peak): | 7.2 MB | |
| Page faults: | 2,399/min | |
| I/O |
| I/O read transfer: | 8.11 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 692 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 2.3 KB/sec | |
| I/O other operations: | 4/sec | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 151 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\sonicwall\ssl-vpn\netextender\neservice.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SONICWALL_NetExtender |
| Display name: | SonicWALL NetExtender Service |
| Type: | Win32OwnProcess, InteractiveProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ADVAPI32.dll |
| Total CPU: | 0.00511326% | |
| Kernel CPU: | 0.00049338% | |
| User CPU: | 0.00461988% | |
| CPU cycles: | 511,313/sec | |
| Context switches: | 3/sec | |
| Memory: | 792 KB | |
| NEService.exe (main module) |
| Total CPU: | 0.00015697% | |
| Kernel CPU: | 0.00008970% | |
| User CPU: | 0.00006728% | |
| CPU cycles: | 3,754/sec | |
| Memory: | 324 KB | |
| slog.dll (SonicWALL SLog DLL by SonicWALL) |
| Total CPU: | 0.00004485% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00004485% | |
| CPU cycles: | 315,056/sec | |
| Context switches: | 19/sec | |
| Memory: | 120 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows Vista Ultimate |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Intel |
100.00% |
|
