» NGService.exe
Overview
Analysis
File Details

NGService.exe

NGService

Tsarfin Computing Ltd

File name:

NGService.exe

Publisher:

Tsarfin Computing Ltd (signed and verified)

Product:

NGService

Description:

Service application for NetGong®

Version:

8.8

MD5:

39e0529d34df67ccde0243ade59f2559

SHA-1:

663a77a9934363592afee10f299f6ec44c681717

SHA-256:

0b37591ae418fb7f97525b3a12d6fcabc9153ae790fdccea4d0cf867089f84a5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 9:44:49 PM UTC (today)

File size:

43.7 KB (44,720 bytes)

Product version:

8.8

Trademarks:

NGService™ is a trademark of Tsarfin Computing in the United States of America and other countries

Original file name:

NGService.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\tsarfin computing\netgong\ngservice.exe

Digital Signature

Signed by:

Tsarfin Computing Ltd

Authority:

COMODO CA Limited

Valid from:

1/17/2013 3:00:00 AM

Valid to:

1/18/2016 2:59:59 AM

Subject:

CN=Tsarfin Computing Ltd, O=Tsarfin Computing Ltd, STREET=21 hadekel St., L=Tirat Carmel, S=Haifa, PostalCode=39020, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

2CA7A905844F5EE8E0CBDFD9853E7B64

File PE Metadata

Compilation timestamp:

5/6/2015 9:33:11 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

12.0

CTPH (ssdeep):

768:MKpVzJ/eDKzCBRW2UQ93CJ1yI+eK3SHf1t7NUQ75VjYVo3L3eG:DpVdWDt1UQUyIzK3S/3L75NHL3eG

Entry address:

0x1E79

Entry point:

B8, 5C, 45, 41, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 20, 37, 7D, BF, 61, 88, D0, D3, E2, 78, F4, 00, FC, 50, 50, 9F, 89, E3, 79, 03, 60, 37, 70, BF, DF, 30, F3, FC, 33, 71, 3C, 7A, 00, 28, 51, A0, F3, FE, 79, FE, B0, C0, FC, E3, 7B, 96, A0, 54, DA, B4, BD, F3, F0, E7, 69, 71, 5B, 08, 38, CF, 37, 8F, 7C, 18, 16, 8F, 9E, 00, 17, 20, 39, A7, 0B, EE, 71, 25, 60, F4, 19, 0C, ED, 30, 25, A1, 71, D1, 97, 50, 38, 72, CE, F5, 0F... 
[+]

Entropy:

6.7817

Packer / compiler:

PECompact v2

Code size:

5.5 KB (5,632 bytes)

Scan NGService.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.