home

ncgservice.exe

잉카엔트웍스 NetsyncContentGaurd

Inka Entworks Corp

It runs as a windows Service named “.NCGService”.
Publisher:
INKAENTWORKS INC.  (signed by Inka Entworks Corp)

Product:
잉카엔트웍스 NetsyncContentGaurd

Description:
NCGService

Version:
1, 1, 0, 8

MD5:
edeaf9bf9cedfe53c868b4ca211b9fcf

SHA-1:
180a594cc120572b99b407d577c959ebfce2884c

SHA-256:
eb8f0ae61c51eefb0c4bc253b0a18bd1ede4ba2c758e6062d1462eae3c1e0128

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:04:11 PM UTC  (today)

File size:
335.9 KB (343,936 bytes)

Product version:
1, 1, 0, 8

Copyright:
INKAENTWORKS INC. Copyright ⓒ 2008-2010

Original file name:
NCGServi.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\ncg\ncgservice.exe

Digital Signature
Signed by:
Inka Entworks Corp

Authority:
GlobalSign nv-sa

Valid from:
6/29/2010 3:28:01 PM

Valid to:
6/29/2011 3:28:01 PM

Subject:
E=suhwan@inka.co.kr, CN=Inka Entworks Corp, O=Inka Entworks Corp, C=KR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012982986ADF

File PE Metadata
Compilation timestamp:
3/16/2011 2:18:04 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:UZ19uesNNyR3l0q4ktxVWioWb3fSX1ljHYqxrXZOCNBvy00v49TTxW8I2DD:UAesNNK8ktxVWiNTKFttxrXdBv19HI2n

Entry address:
0x260C0

Entry point:
48, 83, EC, 28, E8, 87, 9E, 00, 00, 48, 83, C4, 28, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 38, 48, C7, 44, 24, 20, 00, 00, 00, 00, E8, 1E, 9F, 00, 00, 48, 83, C4, 38, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 66, 90, 66, 66, 66, 90, 66, 90, 48, 8B, C1, 48, F7, D9, 48, A9, 07, 00, 00, 00, 74, 0F, 66, 90, 8A, 10, 48, FF, C0, 84, D2, 74, 5F, A8, 07, 75, F3, 49, B8, FF, FE, FE, FE, FE, FE, FE, 7E, 49, BB, 00, 01, 01, 01, 01, 01, 01...
 
[+]

Entropy:
6.3229

Code size:
221 KB (226,304 bytes)

Service
Display name:
.NCGService

Type:
Win32OwnProcess, InteractiveProcess


Scan ncgservice.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.