home

ng_setup.exe

NEXXIA SOFT, S.L.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.nexxiasoft.com and multiple other hosts.
Publisher:
NEXXIA SOFT, S.L.  (signed and verified)

MD5:
c1f8866635a9f274c5e23ee54ed0ca3c

SHA-1:
780fa08ffec7d180165a1cd6a0b415888f73b6d6

SHA-256:
dfb6807e2caec6c00bd6e59e8cd5168dce0318e125af40919750f23cee50f301

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/16/2024 7:00:46 AM UTC  (today)

File size:
80 MB (83,878,872 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ng_setup.exe

Digital Signature
Signed by:
NEXXIA SOFT, S.L.

Authority:
Symantec Corporation

Valid from:
2/8/2016 1:00:00 AM

Valid to:
3/10/2017 12:59:59 AM

Subject:
CN="NEXXIA SOFT, S.L.", O="NEXXIA SOFT, S.L.", L=Barcelona, S=Barcelona, C=ES

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
525C7FBD0D406AFDB2B872E78F660F6F

File PE Metadata
Compilation timestamp:
3/15/2010 7:27:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:EuEvcm9jG6K0n7gJCHhNwmxAOfyBoqgcw/+xsIOrl4JywWXwt4F3+HUf:nEvb9jNKohNwmxrfYw8BMaWwtN0f

Entry address:
0x913F

Entry point:
E8, 1E, FF, FF, FF, 33, C0, 50, 50, 50, 50, E8, BF, 2A, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, FC, 9D, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, 63, A2, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 18, D2, 40, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 1C, D2, 40, 00, 8D, 45, E4...
 
[+]

Code size:
48 KB (49,152 bytes)

The file ng_setup.exe has been seen being distributed by the following 5 URLs.

http://www.nexxiasoft.com/downloads/rsl/.../NG_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&upv=46b08cb25f81a7f1eec553fcbc68dfd9&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA74D792929236F754903678EE7DA05122AB143E645C39B36CD4AD0E3317BB60EDCF5462608B361DB2E2689E3B0F0BC3BC0523710F7AC7566FC55E8302CB26C708A7BBDB7ED81559B20DB1273F6183D4DC6CF767DE4226D4D58C4E068985DDDEC772E3272685EFD30A41FBB71C9E724E0F5390534D7F298B7D4EEB76173B68A610FA3A92DA8043B678638FD32A07D56765&h=EA857D4972FDC596D0F989EEA6E5D6F47A2BC0C0B21996592442DF8716489CB7&directdownload=1&f=304722&d=http://www.nexxiasoft.com/downloads/rsl/.../NG_setup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=4fcb48e394bcda58c5a2fe054ae74417&upv=fc15f65c389f0df886bf868b1d5be4c3&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA74D792929236F754903678EE7DA05122AB143E645C39B36CD4AD0E3317BB60ED63BFCF8ACE97863D1CEE8107B0162868AB4BE20C7882308CAEBFBDCA69A78CE5FCCC16763AABBFA3C3B97E38814D0D98C9F3553E8FB261FDCA5BEF9A7D27CFEFE326D092038A325EF45E51599BA0063D86250FDAC3F004F62BB9C37E59295167C0FEFE4C8F40BC42607E319B053312B3&h=6488D7ADFA54662D1A7C4281310FF84DA107429B1E83D57259256D166BF4A2DB&directdownload=1&f=304722&d=http://www.nexxiasoft.com/downloads/rsl/.../NG_setup.exe

http://ng-erp-crm.softonic.com/descargar

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=445628338d55a0d0bd16d840bd700a38&upv=140778e3402f0b3b5c7ef0f5e0e79d85&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA74D792929236F754903678EE7DA05122AB143E645C39B36CD4AD0E3317BB60EDB15766DB273A18D28E41CE01CEF63A06B0E5BA3A09241402A01A4EDE9E36A1898201826AE9A45104FC6702858368FDA877F26F6C617C51D352E91FC3532022892D2686B2D6E4C49467AA0843B4C3F7DE5A0EAD31C84C4D18C8786F353367AB1D9F811B67D7AC7170503A083A2246CD54&h=04003E9A997141E18537D17D3F2B1499632C076338228CD38A020C02E2122D7C&directdownload=1&f=304722&d=http://www.nexxiasoft.com/downloads/rsl/.../NG_setup.exe

Scan ng_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.