home

NVPRemove.exe

NVPTest

Intuit

Publisher:
Intuit Inc.  (signed by Intuit)

Product:
NVPTest

Version:
1.00

MD5:
a780a5e569565098b5d48057ae23958e

SHA-1:
a650023e72a63a35866dbc5c66292f93cc55d225

SHA-256:
6b970911317dbe9ba150704d38f751ad3b63064d786d3cc9d78a1e90df5025d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:48:27 PM UTC  (today)

File size:
33.3 KB (34,072 bytes)

Product version:
1.00

Original file name:
NVPRemove.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\nvpremove.exe

Digital Signature
Signed by:
Intuit

Authority:
VeriSign, Inc.

Valid from:
7/22/2007 8:00:00 PM

Valid to:
8/24/2008 7:59:59 PM

Subject:
CN=Intuit, OU=Lacerte Software Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Intuit, L=Plano, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
19ACE303D4E4E0C02E8A87981660A37E

File PE Metadata
Compilation timestamp:
9/27/2006 6:28:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:AHej6Slj2yaD645Mw9gJnhEa8YYHWe0+quDsSukEajYJLW2oobJdbya:AHeWS8D6yMwCJhEfTqELyvLFvb

Entry address:
0x1424

Entry point:
68, 70, 15, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, CB, 8A, F4, 62, 8F, 2C, FD, 41, AD, 3C, C3, 1B, DC, 18, 6A, 31, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 6F, 6E, 20, 54, 65, 72, 4E, 56, 50, 52, 65, 6D, 6F, 76, 65, 00, 65, 73, 73, 20, 4C, 69, 00, 00, 00, 00, 01, 00, 02, 00, EC, 18, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, A0, 19, 40, 00, 28, 50, 40, 00, 00, 00, 00, 00, 30, EF, 20, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.7708

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
16 KB (16,384 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.