home

nspmain.exe

nProtect Security Platform 2007

INCA Internet Co.,Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘nProtect Security Platform 2007’.
Publisher:
INCA Internet Co., Ltd.  (signed by INCA Internet Co.,Ltd.)

Product:
nProtect Security Platform 2007

Description:
nProtect Security Platform 2007 Main Application

Version:
2.0.1215.0

MD5:
e424bec374372ae850b7e236dae304ed

SHA-1:
0e208186779db7bd8dfeafe4fa1af611d7168448

SHA-256:
91721222ec0d4d7d7fc7ddf18b3de9e35dd0947a9f234717c0d03e242d6df77a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 9:10:35 PM UTC  (today)

File size:
910.6 KB (932,448 bytes)

Product version:
2.0.1215.0

Copyright:
Copyright (C) INCA Internet. 2000-2007

Original file name:
nspmain.exe

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\Program Files\incainternet\nprotect security platform 2007\nspmain.exe

Digital Signature
Signed by:
INCA Internet Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
11/26/2009 7:00:00 AM

Valid to:
12/2/2010 6:59:59 AM

Subject:
CN="INCA Internet Co.,Ltd.", OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="INCA Internet Co.,Ltd.", L=Seoul, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
313F5E6CE86B5E5578C93A090D947B28

File PE Metadata
Compilation timestamp:
1/30/1987 10:38:08 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:/4M2XG33KNK9eWeeMysTCbvu+6LazDHXI9jx:AM2W7OQlHXI9jx

Entry address:
0xA58DD

Entry point:
E8, 26, 06, 00, 00, E9, D9, FC, FF, FF, CC, 68, AA, 51, 4A, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 94, 4B, 4D, 00, 31, 45, FC, 33, C5, 89, 45, E4, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, E4, 33, CD, E8, C0, F6, FF, FF, E9, 72, 02, 00, 00, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 94, 4B, 4D, 00, 33, C5...
 
[+]

Entropy:
6.0572

Code size:
704 KB (720,896 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
nProtect Security Platform 2007

Command:
C:\Program Files\incainternet\nprotect security platform 2007\nspmain.exe -tray


Scan nspmain.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.