home

nsq8fff.tmp

DailyWiki

The file nsq8fff.tmp by DailyWiki has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download736.mediafire.com and multiple other hosts.
Publisher:
DailyWiki  (signed and verified)

Version:
5.5.1.0

MD5:
499ccf2be814dda42affc131b3dadcd5

SHA-1:
296c3de6c794c4d4bf62bfe41e2b5f7e91e67b24

SHA-256:
aa4f81030e952362dd3b123227eb19c41f86156bf28c84c135119fea2f02942c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 4:41:45 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DailyWiki.Installer (M)
16.1.12.18

File size:
27.9 MB (29,253,256 bytes)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\nsq8fff.tmp

Digital Signature
Signed by:
DailyWiki

Authority:
DailyWiki

Valid from:
9/19/2015 12:16:51 PM

Valid to:
9/16/2025 12:16:51 PM

Subject:
CN=DailyWiki, O=DailyWiki, S=Some-State, C=US

Issuer:
CN=DailyWiki, O=DailyWiki, S=Some-State, C=US

Serial number:
00DE81C7E6A224F568

File PE Metadata
Compilation timestamp:
7/6/2011 4:31:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:lgqJLTssfHceEGKddVhP27DCJBktK2LIQNXK:l7Lfwg4CK

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

The file nsq8fff.tmp has been seen being distributed by the following 50 URLs.

http://download736.mediafire.com/oocrae13dc6g/.../DailyWiki.5.3.1cm.exe

http://download1711.mediafire.com/i9oydzu1ogpg/.../DailyWiki.5.3.1cm.exe

http://download2070.mediafire.com/wdpkoloktdqg/.../DailyWiki.5.3.1cm.exe

http://download1117.mediafire.com/b6cs7o6d12pg/.../DailyWiki.5.3.1cm.exe

http://download998.mediafire.com/jpb9au1608hg/.../DailyWiki.5.3.1cm.exe

http://download1808.mediafire.com/9vcg1h400yig/.../DailyWiki.5.3.1cm.exe

http://download642.mediafire.com/vkl1a3iuvubg/.../DailyWiki.5.3.1cm.exe

http://download736.mediafire.com/j36rrd97o7hg/.../DailyWiki.5.3.1cm.exe

http://download2130.mediafire.com/8gf5dcbabw9g/.../DailyWiki.5.3.1cm.exe

http://download1808.mediafire.com/farjr7pv8r6g/.../DailyWiki.5.3.1cm.exe

http://download1574.mediafire.com/l39ul9fqa6ig/.../DailyWiki.5.3.1cm.exe

http://download2070.mediafire.com/338o0sv1z6pg/.../DailyWiki.5.3.1cm.exe

http://download1574.mediafire.com/rz99jjby7wkg/.../DailyWiki.5.3.1cm.exe

http://download1157.mediafire.com/c8wmjmgv2gxg/.../DailyWiki.5.3.1cm.exe

http://download1451.mediafire.com/9p9et2pj9szg/.../DailyWiki.5.3.1cm.exe

http://download1574.mediafire.com/b21b59m2azzg/.../DailyWiki.5.3.1cm.exe

http://download1682.mediafire.com/oz1xk2riseag/.../DailyWiki.5.3.1cm.exe

http://download1637.mediafire.com/q13ey9go0hlg/.../DailyWiki.5.3.1cm.exe

http://download1421.mediafire.com/grc0u6tobong/.../DailyWiki.5.3.1cm.exe

http://download998.mediafire.com/i9b3ni4rgwug/.../DailyWiki.5.3.1cm.exe

http://download1157.mediafire.com/bw1jd4xwhtug/.../DailyWiki.5.3.1cm.exe

http://download1808.mediafire.com/3yp9j35gz5mg/.../DailyWiki.5.3.1cm.exe

http://download1421.mediafire.com/w1c1mba6wzbg/.../DailyWiki.5.3.1cm.exe

http://download1914.mediafire.com/553nf535k0jg/.../DailyWiki.5.3.1cm.exe

http://download1808.mediafire.com/x18s1k1c1ysg/.../DailyWiki.5.3.1cm.exe

http://download1574.mediafire.com/jd74k8c8ialg/.../DailyWiki.5.3.1cm.exe

http://download1421.mediafire.com/g4rbr0t5lqxg/.../DailyWiki.5.3.1cm.exe

http://download645.mediafire.com/pm61uo8on6kg/.../DailyWiki.5.3.1cm.exe

http://download1808.mediafire.com/ig30uueknp7g/.../DailyWiki.5.3.1cm.exe

http://download642.mediafire.com/57vzg4z3i4mg/.../DailyWiki.5.3.1cm.exe

Latest 30 of 181 download URLs

Remove nsq8fff.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.