home

nv_support_participant.exe

Netviewer application

Netviewer AG

This is a setup program which is used to install the application. The file has been seen being downloaded from get.netviewer.com and multiple other hosts.
Publisher:
Netviewer GmbH  (signed by Netviewer AG)

Product:
Netviewer application

Version:
6.3.1.1857

MD5:
824c7982dba3806666f43bb378faa646

SHA-1:
3ee74e55513db523b8408e38f5849e679d4543dc

SHA-256:
cfb3875541fdf8ad7c63a51af28e7630ad41c07d0a323c3a38b1576abf892057

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 9:39:54 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
1.6 MB (1,718,176 bytes)

Product version:
6.3.1.1857

Copyright:
© 2012 Netviewer GmbH

Original file name:
Netviewer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\nv_support_participant.exe

Digital Signature
Signed by:
Netviewer AG

Authority:
VeriSign, Inc.

Valid from:
11/22/2010 1:00:00 AM

Valid to:
2/21/2014 12:59:59 AM

Subject:
CN=Netviewer AG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Netviewer AG, L=Karlsruhe, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5A3AF074B09C3700B310BB7BFE6E75B5

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:yW8TgWb45zTQbCxmSpCnomwjjRC9KO0Ymxb:MvbMnRxmSpCnomwg96YmZ

Entry address:
0x1000

Entry point:
B8, FC, FB, B3, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 13, 5F, AC, 93, F6, DA, 0E, 4A, 3E, 62, 1D, 64, 84, 49, D6, 3D, 84, 1C, FD, 55, DD, 42, C4, E3, B2, 91, 8B, 9E, 78, 5F, B1, 83, 5D, 46, 47, 07, 34, 2B, E1, 1C, 20, 91, 34, D9, A1, 4A, 0E, DF, DB, C8, 88, 78, 69, 84, 5C, A2, B3, 9D, CD, 37, A7, 64, 76, 51, 46, 37, 34, AA, 15, CC, 52, F8, 8E, C3, 2E, 48, AC, 23, 07, 51, 2E, 10, B8, 50, A3, 76, 71, 4A, BD, 0B, F3, BB, FB...
 
[+]

Packer / compiler:
PECompact v2

Code size:
4.2 MB (4,397,056 bytes)

The file nv_support_participant.exe has been discovered within the following programs.

CENTROdigital SmartClient  by vidicom
www.vidicom.de
About 2% of users remove it
StarMoney 8.0 S-Edition  by Star Finanz GmbH
About 8% of users remove it
 
Powered by Should I Remove It?

The file nv_support_participant.exe has been seen being distributed by the following 35 URLs.

https://get.netviewer.com/support/.../NV_Support_Participant.exe

https://diensten.vwe.nl/.../NV_Support_Participant_kagu4aDqUTb0vE80wmdElw1tiv.exe

http://www.alseve.fr/.../NV_Support_Participant.exe

https://get.netviewer.com/support/.../nvt_sinr450441779_sipw_sitn._kagu.exe

https://www.sparkasse-neuss.de/.../netviewer.exe

http://www.aniwin.com/portal/.../NV_Support_Participant_ES.EXE

http://www.espherica.com/.../One2one2013.exe

https://get.netviewer.com/support/.../nvt_sinr813301267_sipw_sitn_kagu.exe

https://get.netviewer.com/support/.../nvt_sinr344082853_sipw_sitn_kagu.exe

https://get.netviewer.com/support/.../nvt_sinr574817525_sipw_sitn_kagu.exe

https://get.netviewer.com/support/.../nvt_sinr686705539_sipw_sitn_kagu.exe

http://www.pcs.co.uk/support

https://get.netviewer.com/support/.../nvt_sinr547904103_sipw_sitn_kagug4ssb2DEUMVE49nz64Wh2.exe

http://www.winbase.nl/cms_upload/publicaties/.../NV_o2o_Participant_NL.exe

https://get.netviewer.com/support/.../nvt_sinr147016387_sipw_sitn_kagu.exe

https://get.netviewer.com/support/.../nvt_sinr681920608_sipw_sitnMeta_kagu.exe

http://technik.agenda-software.de/nv.exe

https://get.netviewer.com/support/.../nvt_sinr421196933_sipw_sitnsk_kagu.exe

https://get.netviewer.com/support/.../nvt_sinr613670004_sipw_sitn_kagu.exe

https://www.vrbankonline.de/content/dam/f0137-0/mediathek/.../fernwartung.exe

https://get.netviewer.com/support/.../nvt_sinr696499325_sipw_sitn_kagu7o6W7TtO0JSMer9XhN13BL.exe

http://www2.hetlnvloket.nl/applicaties/meekijkapplicatie/.../NV_Support_liRfguoK7wmxKGXJVd1Q4.exe

https://www.hetlnvloket.nl/pls/.../lnvbehe.lnv_info_items.show_item?p_item_code=meekijkapplicatie

https://get.netviewer.com/support/.../nvt_sinr958557563_sipw_sitnJoel Cuddeford_kagu65QxgjjNodSSuLrpWmPvNs.exe

http://www.muis.nl/.../support.exe

http://kundendienst.lexware.de/NV_Support_Participant.exe

http://www.cercosoft.be/NV_Support_Participant.exe

https://get.netviewer.com/support/.../nvt_sinr597668443_sipw_sitnalim_kagu.exe

http://download2.lexware.de/pub/support/.../NV_Support_Participant.exe

https://www.vrbank-hg.de/content/dam/f1180-0/dateien/.../vr-bank_fernwartung.exe

Latest 30 of 35 download URLs

Scan nv_support_participant.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.