» NRConsole.exe
Overview
Analysis
File Details
Programs (1)

NRConsole.exe

NeoRouter Free

NeoRouter Inc.

This is installed with NeoRouter.

File name:

NRConsole.exe

Publisher:

NeoRouter Inc. (signed and verified)

Product:

NeoRouter Free

Description:

NeoRouter Configuration Explorer

Version:

2.3.2.4450

MD5:

fa48672a31f67a41ded1202a817db31a

SHA-1:

9bd73b961f66aa34eff9bf3f8b75dbc57e907f65

SHA-256:

2be6f71a8689ffbb680e96acba45b405295b241f2b86237e703bcaf32021b781

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 5:33:26 PM UTC (today)

File size:

4.9 MB (5,114,848 bytes)

Product version:

2.3.2.4450

Original file name:

NRConsole.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\zebranetworksystems\neorouter\nrconsole.exe

Digital Signature

Signed by:

NeoRouter Inc.

Authority:

GlobalSign nv-sa

Valid from:

11/2/2015 7:40:11 PM

Valid to:

1/29/2017 12:19:27 AM

Subject:

CN=NeoRouter Inc., O=NeoRouter Inc., L=Toronto, S=Ontario, C=CA

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112175B8E4C8ACC196F458EAD2C41CDDE533

File PE Metadata

Compilation timestamp:

10/1/2016 2:51:03 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:X+1+yfmo0dg8xLHdJXxTLury0EvCxmuEush9Tug2p//nzj9Uq1ICeWUwgNXY8:UPmJK8nJXt0y0EKsRzPC/dTNeWc

Entry address:

0x8E56F

Entry point:

E8, C7, B5, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, 60, DA, 71, 00, 75, 02, F3, C3, E9, 47, B6, 00, 00, 51, 53, 55, 56, 57, FF, 35, 08, B4, 75, 00, E8, 78, AF, 00, 00, FF, 35, 04, B4, 75, 00, 8B, F0, 89, 74, 24, 18, E8, 67, AF, 00, 00, 8B, F8, 3B, FE, 59, 59, 0F, 82, 84, 00, 00, 00, 8B, DF, 2B, DE, 8D, 6B, 04, 83, FD, 04, 72, 78, 56, E8, 67, 9C, 00, 00, 8B, F0, 3B, F5, 59, 73, 4A, B8, 00, 08, 00, 00, 3B, F0, 73, 02, 8B, C6, 03, C6, 3B, C6, 72, 10, 50, FF, 74, 24, 14, E8, 72, B7, 00, 00, 85, C0, 59, 59, 75, 17... 
[+]

Entropy:

7.0035

Code size:

2.4 MB (2,543,616 bytes)

The file NRConsole.exe has been discovered within the following program.

NeoRouter by NeoRouter Inc.

About 5% of users remove it

Scan NRConsole.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.