home

novapdf.exe

doPDF 8

Softland S.R.L.

This is a setup program which is used to install the application. This file is installed with the program doPDF 8. The file has been seen being downloaded from dopdf.ar.softonic.com and multiple other hosts.
Publisher:
Softland  (signed by Softland S.R.L.)

Product:
doPDF 8

Version:
8.2.929

MD5:
6cfebc3a1ab2ab81fce71e8f3760bd97

SHA-1:
45ec8b8c185a94287a4b1305fb4e637e67488249

SHA-256:
439b0c39a8797b323a1b6a4e21c4f0ddf139ffbfd33da7865ab41ca12d754df9

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 9:49:41 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
3.15.14.00

File size:
1.3 MB (1,382,792 bytes)

Product version:
8.2.929

Copyright:
Copyright (c) Softland. All rights reserved.

Original file name:
novapdf.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\application data\package cache\{599893a2-098b-4db8-8bc2-5e5f51edc0e1}\novapdf.exe

Digital Signature
Signed by:
Softland S.R.L.

Authority:
VeriSign, Inc.

Valid from:
3/5/2014 1:00:00 AM

Valid to:
5/4/2017 1:59:59 AM

Subject:
CN=Softland S.R.L., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Softland S.R.L., L=Cluj-Napoca, S=Cluj, C=RO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
27EFC97E2F12AD0725501066D4BA9242

File PE Metadata
Compilation timestamp:
2/4/2015 2:12:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
24576:No5T/DWlppJFzzMOA7lOrQC6cGxkhvBmOKJ:AT/qVz3GlAQC6cz4OKJ

Entry address:
0x29A1C

Entry point:
E8, 17, 01, 00, 00, E9, 92, FE, FF, FF, 3B, 0D, 04, 90, 46, 00, 75, 02, F3, C3, E9, ED, 05, 00, 00, 55, 8B, EC, EB, 1F, FF, 75, 08, E8, 84, 6A, 00, 00, 59, 85, C0, 75, 12, 83, 7D, 08, FF, 75, 07, E8, 93, 07, 00, 00, EB, 05, E8, 61, 07, 00, 00, FF, 75, 08, E8, D1, 6A, 00, 00, 59, 85, C0, 74, D4, 5D, C3, E9, CE, 6A, 00, 00, 55, 8B, EC, F6, 45, 08, 01, 56, 8B, F1, C7, 06, FC, EF, 45, 00, 74, 07, 56, E8, E3, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C...
 
[+]

Code size:
291 KB (297,984 bytes)

The file novapdf.exe has been discovered within the following program.

doPDF 8  by Softland
www.dopdf.com
About 8% of users remove it
 
Powered by Should I Remove It?

The file novapdf.exe has been seen being distributed by the following 7 URLs.

http://dopdf.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqiQpJ6olpg=

http://dl3.vessoft.com/files2/d/dopdf_windows/8.2.929/.../dopdf.exe

http://www.dopdf.com/download/.../dopdf.exe

http://dopdf.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqSMp6CkmZQ=

http://cdn.updatestarfilesnow.com/c?x=hqCTMlVe0QKYWa9JUE0B6JOV5vnQgWkfH2hZtW0m2cA=&c=YHnPBtFAXZgBgeCIBiS2JcL/o8E2PZlUtCfVbQ4Dlywy8zi3Z4OITqp5CJmSfSQGRPNgyRiXk/LfSD7 ZoEt2A==&downloadAs=dopdf-printer.exe&fallback_url=http://download.dopdf.com/download/.../dopdf.exe

http://www.dopdf.com/download/.../dopdf-7.exe

http://download.dopdf.com/download/.../dopdf.exe

Scan novapdf.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.