home

NDrive.exe

NDrive Module

NAVER Japan Corporation

Publisher:
NHN Corp.  (signed by NAVER Japan Corporation)

Product:
NDrive Module

Version:
1.2.1.29

MD5:
0ea188cd8a863914f3793d0071adc3a1

SHA-1:
cfc494d7f2cf30bff59861e525a4b2cf4b5ed47b

SHA-256:
ed598141f88c339ef239986e46771b9907eb6f7d9d77a1f08ecf4d7c821c708c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:25:08 PM UTC  (today)

File size:
2.4 MB (2,557,056 bytes)

Product version:
1.2.1.29

Original file name:
NDrive.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ndrive\ndrive.exe

Digital Signature
Signed by:
NAVER Japan Corporation

Authority:
VeriSign, Inc.

Valid from:
8/1/2011 5:00:00 PM

Valid to:
8/1/2012 4:59:59 PM

Subject:
CN=NAVER Japan Corporation, OU=System Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NAVER Japan Corporation, L=Shinagawa-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5E4CA40EFCC53BF7092E02849886900B

File PE Metadata
Compilation timestamp:
6/4/2012 10:02:34 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:HMMzFpVnPWd+y1QyPUHbtmIWfqNe4RxCCU7DP/2rS8byEn3iYFd:5eeq2r8m3Td

Entry address:
0x171FB4

Entry point:
48, 83, EC, 28, E8, 4F, 04, 00, 00, 48, 83, C4, 28, E9, DA, FC, FF, FF, FF, 25, 64, CB, 01, 00, FF, 25, 56, CB, 01, 00, FF, 25, 48, CB, 01, 00, FF, 25, 3A, CB, 01, 00, FF, 25, 2C, CB, 01, 00, FF, 25, 1E, CB, 01, 00, FF, 25, 10, CB, 01, 00, FF, 25, 02, CB, 01, 00, FF, 25, F4, CA, 01, 00, FF, 25, E6, CA, 01, 00, FF, 25, D8, CA, 01, 00, FF, 25, CA, CA, 01, 00, FF, 25, BC, CA, 01, 00, FF, 25, AE, CA, 01, 00, FF, 25, A0, CA, 01, 00, FF, 25, 92, CA, 01, 00, FF, 25, 84, CA, 01, 00, FF, 25, 76, CA, 01, 00, FF, 25...
 
[+]

Entropy:
6.1721

Code size:
1.6 MB (1,625,600 bytes)

Scan NDrive.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.