home

proxyclientui.exe

Blue Coat ProxyClient

Blue Coat Systems, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ProxyClient’.
Publisher:
Blue Coat Systems, Inc.  (signed and verified)

Product:
Blue Coat ProxyClient

Description:
Blue Coat ProxyClient Tray Icon

Version:
3, 2, 2, 6.54152

MD5:
f81c62b3e94387e99ea4af5a44769c4b

SHA-1:
1051001f902ba60caeffb827fa605c0f88d8309a

SHA-256:
25cd407c029efbfc307639266c867b5596cb7ecce5dea5942a92a4acff1e8aba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:27:49 PM UTC  (today)

File size:
301.9 KB (309,160 bytes)

Product version:
3, 2, 2, 6

Copyright:
Copyright © 2008, Blue Coat Systems, Inc.

Original file name:
BlueCoatProxyClientUI.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\blue coat\proxyclient\proxyclientui.exe

Digital Signature
Signed by:
Blue Coat Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/10/2009 7:00:00 PM

Valid to:
6/27/2011 6:59:59 PM

Subject:
CN="Blue Coat Systems, Inc.", OU=Blue Coat, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Blue Coat Systems, Inc.", L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6DE5CC0A4D54FB02EE06AAB6C2845AF9

File PE Metadata
Compilation timestamp:
1/20/2011 6:17:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:nPlVqhmZiKmGXBCGn1eI0bt1i7JxsBjlkWJX9Yg:PehuiK1X1nePwUBjfJX9Yg

Entry address:
0x1599D

Entry point:
E8, 3E, A1, 00, 00, E9, 17, FE, FF, FF, 6A, 0C, 68, B0, 02, 43, 00, E8, 29, 55, 00, 00, 8B, 4D, 08, 33, FF, 3B, CF, 76, 2E, 6A, E0, 58, 33, D2, F7, F1, 3B, 45, 0C, 1B, C0, 40, 75, 1F, E8, D6, 4A, 00, 00, C7, 00, 0C, 00, 00, 00, 57, 57, 57, 57, 57, E8, 91, F4, FF, FF, 83, C4, 14, 33, C0, E9, D5, 00, 00, 00, 0F, AF, 4D, 0C, 8B, F1, 89, 75, 08, 3B, F7, 75, 03, 33, F6, 46, 33, DB, 89, 5D, E4, 83, FE, E0, 77, 69, 83, 3D, 44, 77, 43, 00, 03, 75, 4B, 83, C6, 0F, 83, E6, F0, 89, 75, 0C, 8B, 45, 08, 3B, 05, 34, 77...
 
[+]

Entropy:
6.2875

Code size:
168 KB (172,032 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ProxyClient

Command:
"C:\Program Files\blue coat\proxyclient\proxyclientui.exe"


Scan proxyclientui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.