home

netsynccontentguard.exe

INKAENTWORKS NetsyncContentGaurd

Inka Entworks Corp

Publisher:
INKAENTWORKS INC.  (signed by Inka Entworks Corp)

Product:
INKAENTWORKS NetsyncContentGaurd

Description:
NetsyncContentGaurd

Version:
1, 1, 1410, 815

MD5:
fdd990f6a3e6f37e951edc3467810023

SHA-1:
edc73a9c862f350b4865032e27a528f465d90573

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/5/2024 8:09:05 PM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
2.3 MB (2,393,232 bytes)

Product version:
1, 1, 1410, 815

Copyright:
INKAENTWORKS INC. Copyright ⓒ 2008-2012

Original file name:
NetsyncContentGaurd.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ncg\netsynccontentguard.exe

Digital Signature
Signed by:
Inka Entworks Corp

Authority:
GlobalSign nv-sa

Valid from:
12/23/2013 12:11:11 PM

Valid to:
12/24/2014 12:11:11 PM

Subject:
CN=Inka Entworks Corp, O=Inka Entworks Corp, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11215587ABF0FCF3687AC9F443EEBB6446A4

File PE Metadata
Compilation timestamp:
10/8/2014 3:43:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:kmxH2ATeBSnZZH4MuZ0rBJ/kHd3cGSXEzP2YEIii:zxH2muyveZ0rQHd3crG2Y5

Entry address:
0x126446

Entry point:
E8, 91, 2E, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 51, 8B, 45, 0C, 57, 8B, 7D, 08, 85, C0, 74, 02, 89, 38, 85, FF, 75, 17, E8, 45, 0D, 00, 00, C7, 00, 16, 00, 00, 00, E8, 8C, B0, 00, 00, 33, C0, E9, 90, 01, 00, 00, 83, 7D, 10, 00, 74, 0C, 83, 7D, 10, 02, 7C, DD, 83, 7D, 10, 24, 7F, D7, 83, 65, FC, 00, 53, 56, 6A, 08, 5B, 0F, B7, 37, 53, 56, 83, C7, 02, E8, D4, 25, 01, 00, 59, 59, 85, C0, 75, ED, 66, 83, FE, 2D, 75, 06, 83, 4D, 14, 02, EB, 06, 66, 83, FE, 2B, 75, 06, 0F, B7, 37, 83, C7, 02, 83...
 
[+]

Entropy:
6.7712

Code size:
1.5 MB (1,524,736 bytes)

Scan netsynccontentguard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.