home

NveloApp.exe

NVELO Inc. for Win 7 x64 Operating System

NVELO, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘nveloApp’. This is installed with Dataplex.
Publisher:
Windows (R) Win 7 DDK provider  (signed by NVELO, Inc.)

Product:
NVELO Inc. for Win® 7 x64 Operating System

Description:
NVELO Desktop notification utility

Version:
6.1.7600.16385 built by: WinDDK

MD5:
573d5d395c04f3ef2def0ad7962280ef

SHA-1:
314f5e858673773e5b8ddcfc637d4b3d11544a69

SHA-256:
f003a6680437ce22e659d4dab46ab9e995fc96bf1c3d07bbeb1494b0821ca042

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:51:34 AM UTC  (today)

File size:
106.6 KB (109,200 bytes)

Product version:
6.1.7600.16385

Copyright:
© NVELO Inc. All rights reserved.

Original file name:
NveloApp.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\dataplex\cachefilter\nveloapp.exe

Digital Signature
Signed by:
NVELO, Inc.

Authority:
GlobalSign nv-sa

Valid from:
2/3/2011 9:50:32 AM

Valid to:
1/31/2013 11:35:11 AM

Subject:
CN="NVELO, Inc.", O="NVELO, Inc.", L=Santa Clara, S=CA, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012DECD5178B

File PE Metadata
Compilation timestamp:
10/18/2012 11:43:55 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:RbRIMzp85VEycVYSUxIqLIHyEuGcIIL/sqi1:9zp8XcVYdCqLIHy4Mdi1

Entry address:
0x288C

Entry point:
48, 83, EC, 28, E8, 6B, 02, 00, 00, 48, 83, C4, 28, E9, DA, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 59, 18, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, EC, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 01, 81, 38, 63, 73, 6D, E0, 75, 2C, 83, 78, 18, 04, 75, 26, 8B, 40, 20, 3D, 20, 05, 93, 19, 74, 15, 3D, 21, 05, 93, 19, 74, 0E, 3D, 22, 05, 93, 19, 74, 07, 3D, 00, 40, 99, 01, 75, 07...
 
[+]

Entropy:
4.2425

Code size:
10 KB (10,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
nveloApp

Command:
C:\Program Files\dataplex\cachefilter\nveloapp.exe


The file NveloApp.exe has been discovered within the following program.

Dataplex  by NVELO, Inc.
About 5% of users remove it
 
Powered by Should I Remove It?

Scan NveloApp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.