Gridinsoft Logo
File Icon

The nebula-setup.exe (Nebula Client Installer) File Analysis

Updated 20 days ago
Checked by Malware Check
nebula-setup.exe

Technical Analysis

File Name nebula-setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-21 13:00:35 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
52,466,272
File Size (bytes)
2025-12-21
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
74410866ead763f28752adee6ca6607a
SHA1
87f304bf6118dce255b2d359468525547c580d4e
SHA256
9c74f01dfe6c924998d98a5c7ab26ac5f96594cebad1541e276b3680dbd093f2
SHA512
04db69556717d0bd5a0e11c4848f9452308a17c26a1d7c6796b79e51e39453825c350427630ab07d8e085859b0fe44720323456f04469779c813b2cd4642ab12
ImpHash
262f7b623746b414d0e9c48c1d61145e

PE Analysis

Basic Information

▼
Icon
Hash: d87b27b5e4b01d7a938b72cf51c09c6e
Fuzzy: e0fdf86c0d7c5d68f49d3ae7df2da9b8
dHash: 4cb233cccc33b24c
Image Base 0x00400000
Entry Point 0x006351b0
Compilation Time 2025-03-03 13:51:40
Checksum 0x032102c8 (Actual: 0x032102c8)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\ReleaseAI\win\Release\stubs\x86\ExternalUi.pdb
Digital Signature OK
Imports 2 libraries
KERNEL32, imagehlp
Exports 0 functions
Resources 45 Resources
Sections 7 Sections

Version Information

▼
CompanyName Nebula Technologies
FileDescription Nebula Client Installer
FileVersion 1.4.15
InternalName nebula-setup
LegalCopyright Copyright (C) 2025 Nebula Technologies
OriginalFileName nebula-setup.exe
ProductName Nebula Client
ProductVersion 1.4.15
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,920,522 bytes 2,920,960 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 2F658EF00BE6E7AC3CF2ABC281F698EA
.rdata 0x002cb000 774,496 bytes 774,656 bytes 5.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9A9D50390430CA34D3C16921E5068C82
.data 0x00389000 60,184 bytes 13,824 bytes 4.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D9466D8A146D620CB08C982291A4FFCB
.didat 0x00398000 1,828 bytes 2,048 bytes 4.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6B60FA3D5534070B11A20EDB485C5E96
.fptable 0x00399000 128 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0039a000 268,956 bytes 269,312 bytes 5.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 44AF284B7A6C85D562B192F3E6ED9F58
.reloc 0x003dc000 198,944 bytes 199,168 bytes 6.58 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ FA56DAF9024D98270923CCF8C869806F
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 45 (266,537 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 6 26,098 bytes
9.8%
RT_ICON 6 107,986 bytes
40.5%
RT_DIALOG 5 1,198 bytes
0.4%
RT_STRING 15 11,574 bytes
4.3%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 792 bytes
0.3%
RT_HTML 10 116,736 bytes
43.8%
RT_MANIFEST 1 2,063 bytes
0.8%

Certificate Chain Analysis

▼
Certificate Information
Product Nebula Client
Description Nebula Client Installer
File Version 1.4.15
Original Name nebula-setup.exe
Signing Date 02:12 AM 12/10/2025 (32 days ago)
Verification Status Signed
Signers NEBULA TECHNOLOGIES SDN. BHD.; Sectigo Public Code Signing CA EV R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name nebula-setup
Copyright Copyright (C) 2025 Nebula Technologies
Certificate Chain Summary
Sectigo Public Code Signing Root R46 #1 Primary
Validity Period: 2021-05-25 00:00:00 → 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
Sectigo Public Code Signing CA EV R36 #2 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 33 D7 08 A8 91 40 53 19 E2 A5 BB D3 39 B9 AD 6E
NEBULA TECHNOLOGIES SDN. BHD. #3 Chain
Validity Period: 2023-12-11 00:00:00 → 2026-12-10 23:59:59
Signature Algorithm: sha256RSA
Serial Number: F3 9D EE 2E 9D 21 55 9C F0 8C 75 23 8F F5 91 D1
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #4 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #5 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert Trusted Root G4 #6 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Microsoft Identity Verification Root Certificate Authority 2020 #7 Chain
Validity Period: 2020-04-16 18:36:16 → 2045-04-16 18:44:40
Signature Algorithm: sha384RSA
Serial Number: 54 98 D2 D1 D4 5B 19 95 48 13 79 C8 11 C0 87 99
Caphyon SRL #8 Chain
Validity Period: 2025-03-03 11:37:02 → 2025-03-06 11:37:02
Signature Algorithm: sha384RSA
Serial Number: 33 00 01 EC 95 77 47 37 72 4A EA 46 68 00 00 00 01 EC 95
Microsoft ID Verified CS EOC CA 01 #9 Chain
Validity Period: 2021-04-13 17:31:54 → 2026-04-13 17:31:54
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 06 4A 1A FA CF 05 61 6A 74 00 00 00 00 00 06
Microsoft ID Verified Code Signing PCA 2021 #10 Chain
Validity Period: 2021-04-01 20:05:20 → 2036-04-01 20:15:20
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 07 87 A3 34 A3 7B A5 8E 1C 00 00 00 00 00 07
Microsoft Public RSA Timestamping CA 2020 #11 Chain
Validity Period: 2020-11-19 20:32:31 → 2035-11-19 20:42:31
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 05 E5 CF 0F FF 66 2E C9 87 00 00 00 00 00 05
Microsoft Public RSA Time Stamping Authority #12 Chain
Validity Period: 2024-04-18 17:59:17 → 2025-04-17 17:59:17
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 42 9A C8 6F A5 1B A6 7D 06 00 00 00 00 00 42
Microsoft Public RSA Time Stamping Authority #13 Chain
Validity Period: 2024-04-18 17:59:19 → 2025-04-17 17:59:19
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 43 4C CC 7D F4 98 8B 5A D4 00 00 00 00 00 43

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware