» WindowsFirewallAddApp.exe
Overview
Analysis
File Details
Programs (2)

WindowsFirewallAddApp.exe

NTI Corporation

This is installed with multiple programs including Gateway Backup Agent Service and Acer Backup Agent Service.

File name:

Publisher:

NTI Corporation (signed and verified)

Description:

Agent Module

Version:

3.0.0.98

MD5:

3a59d1c0bb1c5f9eff52285073d5c569

SHA-1:

df75e273d34eda43a3359f87bef16bdeb4f85f7e

SHA-256:

7e40a713d91d19b1ad16f989db4767f9b6e4a3b96778228c2675a5790111d50e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 8:24:42 PM UTC (today)

File size:

16.8 KB (17,216 bytes)

Product version:

3.0.0.98

Original file name:

WindowsFirewallAddApp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\nti\acer backup agent service\windowsfirewalladdapp.exe

Digital Signature

Signed by:

NTI Corporation

Authority:

VeriSign, Inc.

Valid from:

5/21/2010 8:00:00 PM

Valid to:

5/21/2011 7:59:59 PM

Subject:

CN=NTI Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NTI Corporation, L=Irvine, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

590607D9B0A7963A86F191A46BBCD5A8

File PE Metadata

Compilation timestamp:

4/21/2011 10:49:29 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

384:kBFlLkfCIhBoEHMfHNYkk/vfOjzJLJ6YJLAXbCF19YH:kBzwqCBHMlYkknfOfJLZLIbCXu

Entry address:

0x19D9

Entry point:

E8, 4A, 05, 00, 00, E9, 9F, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 80, 41, 40, 00, 89, 0D, 7C, 41, 40, 00, 89, 15, 78, 41, 40, 00, 89, 1D, 74, 41, 40, 00, 89, 35, 70, 41, 40, 00, 89, 3D, 6C, 41, 40, 00, 66, 8C, 15, 98, 41, 40, 00, 66, 8C, 0D, 8C, 41, 40, 00, 66, 8C, 1D, 68, 41, 40, 00, 66, 8C, 05, 64, 41, 40, 00, 66, 8C, 25, 60, 41, 40, 00, 66, 8C, 2D, 5C, 41, 40, 00, 9C, 8F, 05, 90, 41, 40, 00, 8B, 45, 00, A3, 84, 41, 40, 00, 8B, 45, 04, A3, 88, 41, 40, 00, 8D, 45, 08, A3, 94, 41, 40... 
[+]

Entropy:

6.2248

Code size:

4.5 KB (4,608 bytes)

The file WindowsFirewallAddApp.exe has been discovered within the following programs.

Acer Backup Agent Service by NTI Corporation

This is an OEM rebranded version of NTI Backup for Acer PCs.

www.nticorp.com

21% remove it

Gateway Backup Agent Service by NTI Corporation

57% remove it

Scan WindowsFirewallAddApp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.