» prok_net_ncp.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

prok_net_ncp.exe

ProKNet Push Update Client

Real View, LLC

This is installed with ProKNet Client.

File name:

prok_net_ncp.exe

Publisher:

RealView (signed by Real View, LLC)

Product:

ProKNet Push Update Client

Description:

Push Update notification client platform for ProKNet Client

Version:

1.1.0

MD5:

0861ea99014e6afa84acf6a4855e9afa

SHA-1:

74c1614721e6e0e6a88243701c7ebf3cf0070d92

SHA-256:

7a9e75596b30d670eb35ac9aeb82e00ee7b52e2b3a3b4af81bd5ebbe62bd7d5d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 4:38:21 PM UTC (today)

File size:

44.1 KB (45,120 bytes)

Product version:

1.1.0

Original file name:

prok_net_ncp.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Real View, LLC

Authority:

Thawte, Inc.

Valid from:

8/20/2014 6:00:00 PM

Valid to:

8/21/2015 5:59:59 PM

Subject:

CN="Real View, LLC", O="Real View, LLC", L=Boston, S=Massachusetts, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

3AE2AE5CDB7B1A9387522D5543FA3373

File PE Metadata

Compilation timestamp:

7/23/2015 12:05:05 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.56

CTPH (ssdeep):

384:CTMKtE0Z77bwc+po9qzvqonARORfwKkCgi0Rnshnra+8Jfud4mKg:8tE0ZHeYquFB5ZJQHH

Entry address:

0x1290

Entry point:

55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 9C, 12, 41, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, DC, 12, 41, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, C4, 12, 41, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, BA, 80, 00, 00, 00, 89, E5, 57, 31, C0, 8D, BD, E8, FE, FF, FF, 56, 53, 81, EC, 1C, 01, 00, 00, 89, 54, 24, 08, 89, 44, 24, 04, 89, 3C, 24, E8, 37, 40, 00, 00, 89, 7C, 24, 04, C7, 04, 24, 18, 00, 00, 00, E8, 07, 0B, 00, 00, 85, C0, 0F, 84, 7C, 00, 00... 
[+]

Entropy:

4.9697

Packer / compiler:

MingWin32

Code size:

18.5 KB (18,944 bytes)

All Users Start Menu Item

Name:

prok_net_ncp.exe

The file prok_net_ncp.exe has been discovered within the following program.

ProKNet Client by Real View, LLC

www.webrealview.com

About 1% of users remove it

Scan prok_net_ncp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.