home

Downloader.exe

NLIA

Netpia.com Inc.

Publisher:
Netpia, Inc.  (signed by Netpia.com Inc.)

Product:
NLIA

Description:
NLIA Downloader

Version:
1, 0, 0, 8

MD5:
400e778ffe5567cfbea316337ad108f2

SHA-1:
79214b76b0e88b42311b142c1cf37b3b081a39f4

SHA-256:
e1a1488fcd5d91c221ea9035c5d9bc53d60eb7a199e12b297e86184c259dd351

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:15:36 AM UTC  (today)

File size:
257 KB (263,176 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 1995-2010 Netpia, Inc.

Trademarks:
NLIA

Original file name:
Downloader.exe

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\Windows\System32\downloader.exe

Digital Signature
Signed by:
Netpia.com Inc.

Authority:
GlobalSign nv-sa

Valid from:
8/27/2009 1:06:41 AM

Valid to:
8/27/2010 1:06:41 AM

Subject:
E=help@netpiacorp.com, CN=Netpia.com Inc., O=Netpia.com Inc., C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001235B146CC4

File PE Metadata
Compilation timestamp:
6/16/2010 7:48:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:QLT9YTPNR75D7SjokrrVzVXcw2222222E/G3MYGTrD88AA7t9wFjEL:QLxUhyjYw2222222IYGTrNAA73wW

Entry address:
0x2188

Entry point:
E8, AF, 15, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 58, CD, 40, 00, 89, 0D, 54, CD, 40, 00, 89, 15, 50, CD, 40, 00, 89, 1D, 4C, CD, 40, 00, 89, 35, 48, CD, 40, 00, 89, 3D, 44, CD, 40, 00, 66, 8C, 15, 70, CD, 40, 00, 66, 8C, 0D, 64, CD, 40, 00, 66, 8C, 1D, 40, CD, 40, 00, 66, 8C, 05, 3C, CD, 40, 00, 66, 8C, 25, 38, CD, 40, 00, 66, 8C, 2D, 34, CD, 40, 00, 9C, 8F, 05, 68, CD, 40, 00, 8B, 45, 00, A3, 5C, CD, 40, 00, 8B, 45, 04, A3, 60, CD, 40, 00, 8D, 45, 08, A3, 6C, CD, 40...
 
[+]

Entropy:
7.3171

Code size:
28.5 KB (29,184 bytes)

ActiveX Install
Name:
{E78928A6-3D2A-4BF7-A100-F3FBAA351B49}


Scan Downloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.