nanoav.free.setup.exe

NANO Antivirus

NANO Security Ltd

This is a setup and installation application. The file has been seen being downloaded from www.nanoav.ru and multiple other hosts.
Publisher:
NANO Security  (signed by NANO Security Ltd)

Product:
NANO Antivirus

Description:
NANO Antivirus setup

Version:
1.0.38.5127

MD5:
22ae8517952a928f8ec857958c40b292

SHA-1:
92de478ddb0c0b7439e5274b0898a5aacb73c070

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:27:12 AM UTC  (today)

File size:
8 MB (8,361,128 bytes)

Product version:
1.0.38.75127

Copyright:
Copyright (C) 2009 NANO Security

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\programs\nanoav.free.setup.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
5/26/2016 5:59:41 PM

Valid to:
5/27/2017 2:36:12 PM

Subject:
CN=NANO Security Ltd, O=NANO Security Ltd, L=Bryansk, S=Bryansk Oblast, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G3, O=GlobalSign nv-sa, C=BE

Serial number:
59AFDE3D8D0DCFF6689875D4

File PE Metadata
Compilation timestamp:
6/3/2015 3:02:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:SsO8+BClL7vQgjkr16rk2ybp6WR021+zj8EgH0L:oxBgdS16rxYp6C0214jaH0L

Entry address:
0x1154

Entry point:
E9, 6A, 34, 00, 00, E9, 64, 62, 00, 00, E9, C4, 82, 00, 00, E9, 02, 63, 00, 00, E9, 07, 62, 00, 00, E9, 00, 6A, 00, 00, E9, 5A, 63, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
7.9855

Packer / compiler:
Xtreme-Protector v1.05

Code size:
42 KB (43,008 bytes)

The file nanoav.free.setup.exe has been seen being distributed by the following 2 URLs.

Scan nanoav.free.setup.exe - Powered by Reason Core Security