home

NMCP32.DLL

Novell Messenger

Novell, Inc.

This is installed with Novell Messenger.
Publisher:
Novell, Inc.  (signed and verified)

Product:
Novell Messenger

Description:
Novell Messenger Provider

Version:
3.0.2

MD5:
e4e3c0cdbe2825c1ea99cb58a7b73f11

SHA-1:
6281e1457d0f61477149f5ac6104d823a61474b3

SHA-256:
e31a209046d5d19ef2d9e5d1e307c97f0cb35ff5d6676438214851a2588a0fa0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:25:25 PM UTC  (today)

File size:
463.7 KB (474,808 bytes)

Product version:
3.0.2

Copyright:
Copyright © 1999-2015 Novell, Inc. All rights reserved.

Original file name:
NMCP32.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\client\win32\bin\nmcp32.dll

Digital Signature
Signed by:
Novell, Inc.

Authority:
VeriSign, Inc.

Valid from:
3/5/2013 5:30:00 AM

Valid to:
6/4/2016 5:29:59 AM

Subject:
CN="Novell, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Novell, Inc.", L=Provo, S=Utah, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
22184F284C89A9C053CD2B78B4189EEA

File PE Metadata
Compilation timestamp:
12/8/2015 4:14:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:oQanzhbQWi+WpYRdAuaa4nQv7bRJNSCWKDuXrG9w2wprSam2ye:oQCbQWGpYRdVFRv9tVwkaT

Entry address:
0x22BF8

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, B0, BF, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, 25, 1E, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, AF, 12, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, 00, 1E, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, E5, BF, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 55, 8B, EC, 83...
 
[+]

Entropy:
6.5773

Code size:
284 KB (290,816 bytes)

The file NMCP32.DLL has been discovered within the following program.

Novell Messenger  by Novell, Inc.
Publisher's description - “Instant messaging is a way of life in today's world, and a large percentage of your employees are probably using it in the workplace. But all of those chat windows on all of those desktops constitute an unfiltered hole from the internet into your business.”
www.trinity-health.org
About 1% of users remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.