home

NRService.exe

NeoRouter

NeoRouter Inc.

It runs as a separate (within the context of its own process) windows Service named “NeoRouter Client Service”.
Publisher:
NeoRouter Inc.  (signed and verified)

Product:
NeoRouter

Description:
NeoRouter Client Service

Version:
0.9.9.1528

MD5:
a79f6bd5039aa9a87a6456cb91c6c43f

SHA-1:
9a930c53c9434dbf2ffef9bf6553441044d2a484

SHA-256:
07a38316f5faa2c2bc3f7f2cb9d3cad0f345802f7f86c281cb95a42bdcd27f05

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:42:32 PM UTC  (today)

File size:
1.7 MB (1,747,480 bytes)

Product version:
0.9.9.1528

Copyright:
Copyright © 2009 NeoRouter Inc.

Original file name:
NRService.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\zebranetworksystems\neorouter\nrservice.exe

Digital Signature
Signed by:
NeoRouter Inc.

Authority:
GlobalSign nv-sa

Valid from:
9/16/2009 1:23:22 PM

Valid to:
9/17/2010 1:23:18 PM

Subject:
CN=NeoRouter Inc., O=NeoRouter Inc., L=Toronto, S=Ontario, C=CA

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000123C2900E76

File PE Metadata
Compilation timestamp:
11/28/2009 5:02:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:m18qLAICadV9ASeDZ/n13bw2tkrroCjDc0fGcnlOepBqv2Pjb:XFa9m9tGrsYDc0eIjpBqv2PX

Entry address:
0x70AED

Entry point:
E8, 18, 84, 00, 00, E9, 40, FE, FF, FF, CC, 55, 8B, EC, 83, EC, 50, 8B, 5C, 24, 58, C7, 45, B0, 26, 00, 00, 80, C7, 45, B4, 00, 00, 00, 00, C7, 45, B8, 00, 00, 00, 00, C7, 45, BC, 00, 00, 00, 00, C7, 45, C0, 00, 00, 00, 00, 8D, 45, B0, 8B, 2B, 8B, 73, 18, 64, 3B, 35, 00, 00, 00, 00, 74, 12, 53, 56, 6A, 00, 50, 68, 46, 0B, 47, 00, 56, E8, B8, AD, 01, 00, 5E, 5B, 83, FE, 00, 74, 30, 8D, 43, 20, 50, E8, 81, 85, 00, 00, 0B, C0, 74, 16, 8B, 43, 20, 3D, 30, 32, 43, 56, 75, 0C, 8B, 43, 24, 0B, C0, 74, 12, 53, FF...
 
[+]

Entropy:
6.6018

Code size:
1.3 MB (1,310,720 bytes)

Service
Display name:
NeoRouter Client Service

Service name:
NRClientService

Description:
The NeoRouter Client Service.

Type:
Win32OwnProcess


Scan NRService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.