home

NSUpdate.exe

Novinsoft Update

Novinsoft, Inc.

This is installed with SSQ - Marketing Materials. The file has been seen being downloaded from applications2.ssq.ca.
Publisher:
Novinsoft Inc.  (signed by Novinsoft, Inc.)

Product:
Novinsoft Update

Version:
1.1.5358.22254

MD5:
443b7d59b234ee0049e37911a06eb5fd

SHA-1:
6d5d8db9ea9210834f0857c8542559a97db3b208

SHA-256:
833eadbe553bcd0ee6855e4cfef3da6797e91c0164ebdd8bc9c5b28549c8c467

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 6:24:49 PM UTC  (today)

File size:
226.5 KB (231,896 bytes)

Product version:
1.1.5358.22254

Copyright:
Copyright © Novinsoft Inc. 2014

Original file name:
NSUpdate.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\application data\ssq\nsupdate.exe

Digital Signature
Signed by:
Novinsoft, Inc.

Authority:
DigiCert Inc

Valid from:
3/23/2014 5:00:00 PM

Valid to:
3/28/2017 5:00:00 AM

Subject:
CN="Novinsoft, Inc.", O="Novinsoft, Inc.", L=Port Perry, S=Ontario, C=CA

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0477780528F9CA7EEB79951302B8C861

File PE Metadata
Compilation timestamp:
9/2/2014 10:21:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:mkXlrQQiRqykjDykjaykjC5ykj986ykjoLOYiXP/fx8e+Ajk6S:0OLiwpdwf099S

Entry address:
0x3146E

Entry point:
FF, 25, 7C, 14, 43, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 14, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, AE, FC, 05, 54, 00, 00, 00, 00, 02, 00, 00, 00, 44, 00, 00, 00, A0, 14, 03, 00, A0, F6, 02, 00, 52, 53, 44, 53, 58, 0B, 35, 4D, 66, 98, 93, 4B, 9D, 86, 6A, 2C, 23, 3B, 0C, CD, 01, 00, 00, 00, 45, 3A, 5C, 6E, 69, 73, 5C, 4E, 53, 55, 70, 64, 61, 74, 65, 5C, 62, 69, 6E, 5C, 52, 65, 6C, 65, 61, 73, 65, 53, 53, 51, 5C, 4E, 53, 55, 70, 64, 61, 74, 65, 2E, 70, 64, 62, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.8786

Code size:
189.5 KB (194,048 bytes)

The file NSUpdate.exe has been discovered within the following programs.

SSQ - Marketing Materials  by Novinsoft Inc.
www.novinsoft.com
About 1% of users remove it
SSQ Update  by Novinsoft Inc.
About 4% of users remove it
 
Powered by Should I Remove It?

The file NSUpdate.exe has been seen being distributed by the following URL.

http://applications2.ssq.ca/.../NSUpdate.exe

Scan NSUpdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.