home

setup v8.exe

Installer

Nuvision Global Limited

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dl.new-secdl.com and multiple other hosts.
Publisher:
My Company, Inc.   (signed by Nuvision Global Limited)

Product:
Installer

Description:
Installer Setup

Version:
1.0

MD5:
86278997ea4529afa30600c68491535e

SHA-1:
e502f7a9d33ad524e01c4ae51df49b17485f1130

SHA-256:
839b22ff0a66a1dca6dc8cc8866573db7f85b5d25cfa77720657c9a974603509

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:41:25 AM UTC  (today)

File size:
720.4 KB (737,736 bytes)

Product version:
1.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup v8.exe

Digital Signature
Signed by:
Nuvision Global Limited

Authority:
COMODO CA Limited

Valid from:
9/30/2014 8:00:00 PM

Valid to:
10/1/2015 7:59:59 PM

Subject:
CN=Nuvision Global Limited, OU=SaaS, O=Nuvision Global Limited, STREET=The Alexander Suite Silk Point, L=Queens Avenue, S=Macclesfield, PostalCode=SK10 2BB, C=GB

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2B3DFA1FAA0CBB47F898C01FDDE2FAB7

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:UQiG4CL8+iDNdRs/z7vJJ6V+LORgL1jVRDgtwuzF9oon9C15LP8hjlKhC2IqjzvA:UQi5i8Ddu/PPS+LOk1jVF1uzF9tOLPuJ

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9670

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file setup v8.exe has been seen being distributed by the following 27 URLs.

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r43OX61OFqB1kBJts1yJICR000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Wemj46B2jpK3bY2Kfnca1yKiU9000.&s2=561721&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r2.5ZM3ELY61g1wdN1yJ.6v000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r186ldiq7ob1OACzs1yJYau000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r0lqvet7oxO2OWpT61yJvk5000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r01YBEHFeZi39xqC51yJYDs000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r3v1qcIh.mV1l8ezj1yJDGY000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Wemj1TAZZg4vVq3bg2.T1yJAMP000.&s2=561721&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r4MMolpy8Uu0rzT4W1yJBdQ000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r1MMzHlgbcd1AnXsn1yKBxH000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r0Z7XEZVY1w1IJNCw1yJcEd000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r4NukyJn1XB2MsVll1yJtRI000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r2WvhxO9qMM1vajkT1yKwP2000.&s2=561741&s3=

http://dl878.secure-downldr.com/setup v8.exe

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r3AsZHw3tZk3c2QqT1yJT.l000.&s2=561741&s3=

http://dl285.secure-downldr.com/setup v8.exe

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r2uRXCrXOIX0RBQHd1yJANb000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r3ARnPqSkn11nNGpH1yJ9bf000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r0iHS37BsD.1LehUo1yKn.r000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r3.3ObcfBu83Ydp2j1yJYb1000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Wemj23pztSSNIw1Fa97H1yJnBI000.&s2=561721&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Uc655gL5AbDC3s1igFuc1yJ8z5000.&s2=699963&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r596iYxv.Uw1ZKzgI1yJd2v000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r2eP3jxPmHW1rZd491yKfGq000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r46hqx13XrZ0gN96P1yK71m000.&s2=561741&s3=

http://dl.new-secdl.com/clk?p=mtm&s1=20Ty5r2TlkbpFIe13njZFX1yJinC000.&s2=561741&s3=

http://dl310.secure-downldr.com/setup v8.exe

Scan setup v8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.