home

Novaschem.exe

Skola24 Schema

Nova Software AB

Publisher:
Nova Software  (signed by Nova Software AB)

Product:
Skola24 Schema

Version:
1.0.4586.21316

MD5:
7a2fb5163d1f307ff5d4507fdd60aad3

SHA-1:
bd3ba9391f637e9cb29fe2daef9fdc02652ea1a5

SHA-256:
631e5e723797ba0d48c927aedf4b7edd0d54415c7e34d83e8077b912cb45db90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 11:57:48 AM UTC  (today)

File size:
6.3 MB (6,595,432 bytes)

Product version:
1.0.4586.21316

Copyright:
Copyright © 1986-2014

Original file name:
Novaschem.exe

File type:
Executable application (Win32 EXE)

Language:
Swedish (Sweden)

Common path:
C:\users\{user}\appdata\local\apps\2.0\ct48arva.z18\cj00vbv5.eho\novaschem_1ec943bb1baee35c_0001.0000_none_c900ba2ec4a1884f\novaschem.exe

Digital Signature
Signed by:
Nova Software AB

Authority:
COMODO CA Limited

Valid from:
9/26/2012 2:00:00 AM

Valid to:
9/27/2015 1:59:59 AM

Subject:
CN=Nova Software AB, O=Nova Software AB, STREET=Storgatan 5A, L=FALKOPING, S=SWEDEN, PostalCode=52142, C=SE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B7A037101AE5C34BB2066D8D6D4C1BC0

File PE Metadata
Compilation timestamp:
8/21/2015 2:30:47 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:GTXRsVuf7KSlzMeBIKZjPqyAmOs5GNPI/G6r25Ef+mHkT5oW+K8qEvm6fpUrix2T:GTXRs8f7/jPq0yhbGe5YNe08Z/Em

Entry address:
0x4BF502

Entry point:
FF, 25, DC, 64, 91, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4D, F0, E9, 68, 84, B4, FF, 8B, 4D, F0, 83, C1, 28, E9, AD, 69, B4, FF, B8, B8, 71, 9D, 00, E9, 53, E2, FF, FF, CC, CC, CC, 8B, 4D, F0, E9, 18, 8F, B4, FF, B8, EC, 71, 9D, 00, E9, 3E, E2, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8D, 4D, E8, E9, 78, 38, F0, FF, B8, 18, 72, 9D, 00, E9, 1E, E2, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8D, 4D, B8, E9, 58, 38, F0, FF, 8D, 4D, C0, E9, 90, 76, B4, FF, 8B, 4D...
 
[+]

Code size:
5.1 MB (5,323,264 bytes)

Scan Novaschem.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.