home

ncgservice.exe

잉카엔트웍스 NetsyncContentGaurd

Inka Entworks Corp

It runs as a windows Service named “.NCGService”. This is installed with NCG Agent.
Publisher:
INKAENTWORKS INC.  (signed by Inka Entworks Corp)

Product:
잉카엔트웍스 NetsyncContentGaurd

Description:
NCGService

Version:
1, 1, 0, 8

MD5:
3bba7acd065de6330373a1a7f3f566e8

SHA-1:
06d36712091bd3f4851e1c436306d7e28fe35f96

SHA-256:
4a844cd2498d5602ac3d401f84c07edf576f4a5daf4fc1ca555d0b7b7ca30ef0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:16:05 AM UTC  (today)

File size:
231.9 KB (237,440 bytes)

Product version:
1, 1, 0, 8

Copyright:
INKAENTWORKS INC. Copyright ⓒ 2008-2010

Original file name:
NCGServi.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ncg\ncgservice.exe

Digital Signature
Signed by:
Inka Entworks Corp

Authority:
GlobalSign nv-sa

Valid from:
6/29/2010 3:28:01 PM

Valid to:
6/29/2011 3:28:01 PM

Subject:
E=suhwan@inka.co.kr, CN=Inka Entworks Corp, O=Inka Entworks Corp, C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012982986ADF

File PE Metadata
Compilation timestamp:
3/16/2011 2:17:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:TBSdZWZs7F6DNrtJOVCYKVHIt7JuoKvuv:FSdY26JxVot7Ju/Gv

Entry address:
0x18B88

Entry point:
E8, 40, 8B, 00, 00, E9, 40, FE, FF, FF, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 10, 5B, 43, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 10, 5B, 43, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B...
 
[+]

Entropy:
6.6104

Code size:
160 KB (163,840 bytes)

Service
Display name:
.NCGService

Type:
Win32OwnProcess, InteractiveProcess


The file ncgservice.exe has been discovered within the following program.

NCG Agent  by INKA ENTWORKS
www.netsync.co.kr
About 1% of users remove it
 
Powered by Should I Remove It?

Scan ncgservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.