home

Wanova.Desktop.Notification.exe

VMware Mirage(tm)

VMware, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Mirage Client’.
Publisher:
VMware  (signed by VMware, Inc.)

Product:
VMware Mirage(tm)

Description:
VMware Mirage Desktop Notification

Version:
5.8.1.38892

MD5:
b2e5fd0b802c05343d29b4167d46e7d3

SHA-1:
f562eb53cec56c919cabcab91183e11e7ff957b1

SHA-256:
10ba901554adfdff08e22092e1a1b3bd54d6bdaebb47ae87cf0c0eb3070f5e87

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:44:44 AM UTC  (today)

File size:
631.8 KB (646,968 bytes)

Product version:
5.8.1.38892

Copyright:
Copyright © 2008-2016 VMware, Inc. All rights reserved.

Trademarks:
VMware Mirage(tm)

Original file name:
Wanova.Desktop.Notification.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wanova\mirage service\wanova.desktop.notification.exe

Digital Signature
Signed by:
VMware, Inc.

Authority:
DigiCert Inc

Valid from:
12/13/2015 1:00:00 AM

Valid to:
12/14/2018 1:00:00 PM

Subject:
CN="VMware, Inc.", O="VMware, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
04E034DDD235D5E33E4E8BFA1FA57BE5

File PE Metadata
Compilation timestamp:
8/30/2016 3:40:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:Vpd+KdxSfZAL6fFB96yiDIslhlnfE5LTmtXIPOuG+p8wXkl3DMf5KM67rQFcw99K:NktPFalmuxVZT

Entry address:
0x9BE6E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
616 KB (630,784 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Mirage Client

Command:
C:\Program Files\wanova\mirage service\wanova.desktop.notification.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.