home

NRService.exe

NeoRouter Mesh

NeoRouter Inc.

It runs as a separate (within the context of its own process) windows Service named “NeoRouter Client Service”.
Publisher:
NeoRouter Inc.  (signed and verified)

Product:
NeoRouter Mesh

Description:
NeoRouter Client Service

Version:
2.2.1.4328

MD5:
31fd63a470c5a768d2eef8f1f73b5d51

SHA-1:
c22144b262842cd77157c95ec9dfde59a6938ada

SHA-256:
ea982612afb62984d27616af4b6f268edc54fc4cab5a7d4020c1fafa44282d0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:37:42 AM UTC  (today)

File size:
1.8 MB (1,902,416 bytes)

Product version:
2.2.1.4328

Copyright:
Copyright © 2014 NeoRouter Inc.

Original file name:
NRService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zebranetworksystems\neorouter\nrservice.exe

Digital Signature
Signed by:
NeoRouter Inc.

Authority:
GlobalSign nv-sa

Valid from:
8/13/2013 4:56:27 PM

Valid to:
11/29/2014 1:19:27 AM

Subject:
CN=NeoRouter Inc., O=NeoRouter Inc., L=Toronto, S=Ontario, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C5B49D7565641D193539ED49712A073B

File PE Metadata
Compilation timestamp:
4/11/2014 7:16:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
49152:ujjut33f8cZgsVvvDO67p+nqN5+pnbZ2iBgf:H9X5vvDzlcgobg

Entry address:
0x74F59

Entry point:
E8, 4C, 87, 00, 00, E9, 40, FE, FF, FF, CC, 55, 8B, EC, 83, EC, 50, 8B, 5C, 24, 58, C7, 45, B0, 26, 00, 00, 80, C7, 45, B4, 00, 00, 00, 00, C7, 45, B8, 00, 00, 00, 00, C7, 45, BC, 00, 00, 00, 00, C7, 45, C0, 00, 00, 00, 00, 8D, 45, B0, 8B, 2B, 8B, 73, 18, 64, 3B, 35, 00, 00, 00, 00, 74, 12, 53, 56, 6A, 00, 50, 68, B2, 4F, 47, 00, 56, E8, FA, AF, 01, 00, 5E, 5B, 83, FE, 00, 74, 30, 8D, 43, 20, 50, E8, B5, 88, 00, 00, 0B, C0, 74, 16, 8B, 43, 20, 3D, 30, 32, 43, 56, 75, 0C, 8B, 43, 24, 0B, C0, 74, 12, 53, FF...
 
[+]

Entropy:
6.5562

Code size:
1.4 MB (1,421,312 bytes)

Service
Display name:
NeoRouter Client Service

Service name:
NRClientService

Description:
The NeoRouter Client Service.

Type:
Win32OwnProcess


Scan NRService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.