home

npav4.exe

NET PROTECTOR ANTIVIRUS

Biz Secure Labs Pvt. Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NPAV4’.
Publisher:
Biz Secure Lab Pvt. Ltd,Pune  (signed by Biz Secure Labs Pvt. Ltd.)

Product:
NET PROTECTOR ANTIVIRUS

Description:
npav4

Version:
2017, 2, 7, 0

MD5:
1f242400f6cf193ba4c92c4b5d74a879

SHA-1:
7a050b546430ecd62ad9ddcbf2e1b3a9733f01d1

SHA-256:
f45effaf5567fe95b80339d431dab378df39722ecdacf1ada04e18d76e3d815e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 2:09:25 AM UTC  (today)

File size:
596.7 KB (611,016 bytes)

Product version:
2017, 0, 0, 0

Copyright:
Copyright © 2017

Original file name:
npav4.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\net protector 2016\npav4.exe

Digital Signature
Signed by:
Biz Secure Labs Pvt. Ltd.

Authority:
GlobalSign nv-sa

Valid from:
12/3/2013 11:19:26 PM

Valid to:
3/1/2017 6:03:38 PM

Subject:
E=support@indiaantivirus.com, CN=Biz Secure Labs Pvt. Ltd., O=Biz Secure Labs Pvt. Ltd., L=Pune, S=Maharashfra, C=IN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121671B9C9C88B96999D212247766A5D404

File PE Metadata
Compilation timestamp:
2/7/2017 3:50:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0xC607

Entry point:
55, 8B, EC, 6A, FF, 68, E8, 31, 41, 00, 68, 90, 00, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 4C, 31, 41, 00, 33, D2, 8A, D4, 89, 15, 6C, EC, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 68, EC, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 64, EC, 41, 00, C1, E8, 10, A3, 60, EC, 41, 00, 33, F6, 56, E8, 02, 22, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 3F, 38, 00, 00, FF, 15, 48, 31, 41, 00, A3, C4, 01, 42, 00, E8...
 
[+]

Entropy:
5.6996

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NPAV4

Command:
"C:\Program Files\net protector 2016\npav4.exe"


Scan npav4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.