» Novwin.exe
Overview
Analysis
File Details

Novwin.exe

Novaschem

Nova Software AB

File name:

Novwin.exe

Publisher:

Nova Software (signed by Nova Software AB)

Product:

Novaschem

Description:

Novwin

Version:

7.0.2938.47134

MD5:

8119e76a5fcc140a996b0b765e835f4e

SHA-1:

5858099cce2f3d3b33c3915fd7e6d9a1bc3d0b81

SHA-256:

d5a93e99ed0df6ccbcb19b74cb4819f1e1ba1c4523421bce01d028dfa7fe6e85

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 1:46:13 AM UTC (today)

File size:

5.3 MB (5,534,392 bytes)

Product version:

7.0.2938.47134

Original file name:

Novwin.exe

File type:

Executable application (Win32 EXE)

Language:

Svensk (Sverige)

Common path:

C:\Program Files\ist\novaschem\program\novwin.exe

Digital Signature

Signed by:

Nova Software AB

Authority:

The USERTRUST Network

Valid from:

11/10/2009 1:00:00 AM

Valid to:

11/10/2012 12:59:59 AM

Subject:

CN=Nova Software AB, O=Nova Software AB, STREET=Storgatan 5 A, L=Falköping, S=Sweden, PostalCode=521 42, C=SE

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

120568123BC07DA8B2C9265AD47C6EFE

File PE Metadata

Compilation timestamp:

2/15/2011 11:06:38 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

98304:95g3LHTMuCjAnftzl1EByfAowe5ts+gQddJsw4HOlETqK8:L4BbEYAoweY+m8

Entry address:

0x434A70

Entry point:

E8, 59, F6, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 78, 83, 8A, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, 90, E4, 89, 00, C9, C2, 08, 00, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63... 
[+]

Code size:

4.6 MB (4,835,328 bytes)

Scan Novwin.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.