» n5client.exe
Overview
Analysis
File Details

n5client.exe

NetClient5

Doctorsoft Co., Ltd.

File name:

n5client.exe

Publisher:

DOCTORSOFT CO.,LTD. (signed by Doctorsoft Co., Ltd.)

Product:

NetClient5

Description:

[2011.01.19.1] NetClient5 Program n5client

Version:

5, 2, 11, 500

MD5:

2fba802965b97552dd7fb347c02f2c95

SHA-1:

f75eef2efcf68ef8535ef4da4954e09816fd1a8f

SHA-256:

8701e70d4345a920f0d39fcb2da51f2068d6a1eb471dc8436fdd76b8a2a27ebc

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/16/2024 6:34:06 AM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

DLOADER.Trojan

9.0.1.0343

File size:

658.3 KB (674,064 bytes)

Product version:

5, 2, 11, 1

Trademarks:

NetClient

Original file name:

n5client.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Windows\System32\netclient5\n5client.exe

Digital Signature

Signed by:

Doctorsoft Co., Ltd.

Authority:

GlobalSign nv-sa

Valid from:

5/26/2011 1:33:55 PM

Valid to:

5/26/2012 1:33:53 PM

Subject:

CN="Doctorsoft Co., Ltd.", OU=DevTeam, O="Doctorsoft Co., Ltd.", L=Guro-gu, S=Seoul, C=KR

Issuer:

CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:

010000000001302A9F065F

File PE Metadata

Compilation timestamp:

8/30/2011 4:40:59 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:KuxKwXonKEQQmz8djeOzyK6tFZJ8TBUm/58jEl9eQ:Kuo/KJzjLZJy7h8YlIQ

Entry address:

0x5B683

Entry point:

E8, 4D, D6, 00, 00, E9, 16, FE, FF, FF, CC, CC, CC, 83, EC, 14, 53, 8B, 5C, 24, 20, 55, 56, 8B, 73, 08, 33, 35, BC, EF, 49, 00, 57, 8B, 06, 83, F8, FE, C6, 44, 24, 13, 00, C7, 44, 24, 18, 01, 00, 00, 00, 8D, 7B, 10, 74, 0D, 8B, 4E, 04, 03, CF, 33, 0C, 38, E8, 81, D0, FF, FF, 8B, 4E, 0C, 8B, 46, 08, 03, CF, 33, 0C, 38, E8, 71, D0, FF, FF, 8B, 44, 24, 28, F6, 40, 04, 66, 0F, 85, 1F, 01, 00, 00, 8B, 6B, 0C, 83, FD, FE, 8B, 4C, 24, 30, 8D, 54, 24, 1C, 89, 44, 24, 1C, 89, 4C, 24, 20, 89, 53, FC, 74, 5E, 8D, 44... 
[+]

Entropy:

6.4756

Code size:

504 KB (516,096 bytes)

Scan n5client.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.