» SafePC_ImgClnt.exe
Overview
Analysis
File Details

SafePC_ImgClnt.exe

NICSTECH CO.,LTD.

File name:

SafePC_ImgClnt.exe

Publisher:

NicsTech (signed by NICSTECH CO.,LTD.)

Description:

SafePC_ImgClnt(A)

Version:

4, 0, 0, 11 (2014051401)

MD5:

485ab353d00b353de6eced812218f761

SHA-1:

27ce515584ecdf325366f6f57aca8ca1373d6cbf

SHA-256:

b0ed0189feeb7f96f1ee285acfd97e0a5516c2a3c1a59824e36ebce83825afc3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 4:39:33 PM UTC (today)

File size:

142.3 KB (145,664 bytes)

Product version:

4, 0, 0, 0

Original file name:

SafePC_ImgClnt.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\windows\nics\safepc_imgclnt.exe

Digital Signature

Signed by:

NICSTECH CO.,LTD.

Authority:

VeriSign, Inc.

Valid from:

3/24/2014 9:00:00 AM

Valid to:

5/23/2017 8:59:59 AM

Subject:

CN="NICSTECH CO.,LTD.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="NICSTECH CO.,LTD.", L=Gangseo-gu, S=Seoul, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

11F45D67945774D843249DF8342E8FBB

File PE Metadata

Compilation timestamp:

7/25/2014 11:03:22 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:OGDc7xJXb+BZwMMAbdcuewOIbV3M3UiI8MD2u+4Yx7ojO35nPknPMOdPm78:ZDcd0BZw+MlatJBCojO35PkPM6

Entry address:

0x6F00

Entry point:

E8, 9E, 04, 00, 00, E9, 63, FD, FF, FF, 6A, 14, 68, 28, B8, 41, 00, E8, DA, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, E8, 04, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, D0, 01, 00, 00, C2, 10, 00, 6A, 0C, 68, 48, B8, 41, 00, E8, 7C, 01, 00, 00, 83, 65, E4, 00, 8B, 75, 0C, 8B, C6, 0F, AF, 45... 
[+]

Entropy:

6.8682

Code size:

91.5 KB (93,696 bytes)

Scan SafePC_ImgClnt.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.