home

proxyclientui.exe

Blue Coat ProxyClient

Blue Coat Systems, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ProxyClient’.
Publisher:
Blue Coat Systems, Inc.  (signed and verified)

Product:
Blue Coat ProxyClient

Description:
Blue Coat ProxyClient Tray Icon

Version:
3, 2, 2, 3.49233

MD5:
dace1fc41c9e799fbbc858aa584db549

SHA-1:
462a1b6ba5afde2f7cfcff1b861f8f5f9bfa80d5

SHA-256:
c7cf8ac25d8a01b1e731c077cea3b13a0d8c6ca5926abb6695516d540375a0c5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 3:30:30 PM UTC  (today)

File size:
301.9 KB (309,160 bytes)

Product version:
3, 2, 2, 3

Copyright:
Copyright © 2008, Blue Coat Systems, Inc.

Original file name:
BlueCoatProxyClientUI.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\blue coat\proxyclient\proxyclientui.exe

Digital Signature
Signed by:
Blue Coat Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/11/2009 5:30:00 AM

Valid to:
6/28/2011 5:29:59 AM

Subject:
CN="Blue Coat Systems, Inc.", OU=Blue Coat, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Blue Coat Systems, Inc.", L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6DE5CC0A4D54FB02EE06AAB6C2845AF9

File PE Metadata
Compilation timestamp:
8/18/2010 1:27:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:9PlVqhmZiKmGXBCGn1eI0bt1i73xsBclkWJXNxU:NehuiK1X1nePwqBcfJXNxU

Entry address:
0x1599D

Entry point:
E8, 3E, A1, 00, 00, E9, 17, FE, FF, FF, 6A, 0C, 68, B0, 02, 43, 00, E8, 29, 55, 00, 00, 8B, 4D, 08, 33, FF, 3B, CF, 76, 2E, 6A, E0, 58, 33, D2, F7, F1, 3B, 45, 0C, 1B, C0, 40, 75, 1F, E8, D6, 4A, 00, 00, C7, 00, 0C, 00, 00, 00, 57, 57, 57, 57, 57, E8, 91, F4, FF, FF, 83, C4, 14, 33, C0, E9, D5, 00, 00, 00, 0F, AF, 4D, 0C, 8B, F1, 89, 75, 08, 3B, F7, 75, 03, 33, F6, 46, 33, DB, 89, 5D, E4, 83, FE, E0, 77, 69, 83, 3D, 44, 77, 43, 00, 03, 75, 4B, 83, C6, 0F, 83, E6, F0, 89, 75, 0C, 8B, 45, 08, 3B, 05, 34, 77...
 
[+]

Entropy:
6.2876

Code size:
168 KB (172,032 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ProxyClient

Command:
"C:\Program Files\blue coat\proxyclient\proxyclientui.exe"


Scan proxyclientui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.