home

exnvd.exe

Chencheng Cai

The application exnvd.exe by Chencheng Cai has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Chencheng Cai  (signed and verified)

MD5:
449d2d3e5fc2b6666841558b1650aff3

SHA-1:
853780b447c61cb859015c9a7c521b4fd6343ac0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
2/25/2025 6:18:06 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ELEX (M)
16.7.26.14

File size:
406.5 KB (416,216 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\tools\exnvd.exe

Digital Signature
Signed by:
Chencheng Cai

Authority:
thawte, Inc.

Valid from:
5/27/2016 2:00:00 PM

Valid to:
1/18/2017 12:59:00 PM

Subject:
CN=Chencheng Cai, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1602B3C8A91624463DFC128FAEFB8AF1

File PE Metadata
Compilation timestamp:
5/27/2016 4:38:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:oI4EjuxBkhBFLdQ5B1a0GxJHqq1g9w3p4lR3xJbykMMCovH:5eqhBFRQ5BBGxJH/gbWkMwvH

Entry address:
0x41000

Entry point:
90, B8, 63, 7B, 2C, 00, 90, 90, 68, 1E, 10, 44, 00, 5E, BF, 98, 05, 00, 00, FF, 34, 3E, 31, 04, 24, 8F, 04, 3E, 83, EF, 04, 75, F2, 90, 8B, 06, 2D, 00, 63, 7B, 2C, 00, 63, 7B, 6C, 00, D4, 97, 2C, 00, 73, D9, 2F, 00, BB, D2, 2F, 00, 63, CB, 2E, 00, 62, 7B, 2C, 00, 73, 2B, 6E, 00, 6D, A5, 6E, 00, 79, A5, 6E, 00, 57, BF, 2E, 00, 6F, A5, 2E, 00, 7B, A5, 2E, 00, 73, 43, 2E, 00, 6F, A5, 2E, 00, 7B, A5, 2E, 00, 63, 7B, 2C, 00, 63, 7B, 2C, 00, 63, 7B, 2C, 00, 63, 7B, 2C, 00, 63, 7B, 2C, 00, 63, 7B, 2C, 00, 63, 7B...
 
[+]

Code size:
141 KB (144,384 bytes)

Remove exnvd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.