home

1648264_setup.exe

Nero AG

This is a self-extracting archive and installer. This is installed with Nero BurnLite 10. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Nero AG  (signed and verified)

Version:
1.0.1.0

MD5:
358e7c43798ebd3f73652483bab2ce99

SHA-1:
174d24e06fd8749892de725d8effe616dff45345

SHA-256:
e2026988ffcf96167bc8d30998a51206f066a885351d8ade094193660da0e39c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:29:24 AM UTC  (today)

File size:
31.2 MB (32,737,424 bytes)

Product version:
1.0.1.0

Original file name:
NeroSFX.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\1648264_setup.exe

Digital Signature
Signed by:
Nero AG

Authority:
VeriSign, Inc.

Valid from:
5/10/2009 9:00:00 PM

Valid to:
6/21/2012 8:59:59 PM

Subject:
CN=Nero AG, OU=LEGAL DEPARTMENT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nero AG, L=Karlsbad, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7D71513F7643F5FDBB5855E9FCE34351

File PE Metadata
Compilation timestamp:
3/23/2010 6:18:57 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:V6qGiz/XXoPeSxpSF+BzXkwvB+Q3QWOA6K:YxiLXoPemprBr7A096K

Entry address:
0x1384D

Entry point:
E8, 5C, 56, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, A0, 3B, 43, 00, 75, 02, F3, C3, E9, DC, 56, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 72, 1E, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, BB, 13, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, A2, 57, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 81, 21, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8...
 
[+]

Code size:
164 KB (167,936 bytes)

The file 1648264_setup.exe has been discovered within the following program.

Nero BurnLite 10  by Nero AG
Publisher's description - “Nero BurnLite 10, from the world's most trusted digital media brand, includes free basic data burning, disc copying, and disc imaged (Imager Recorder) creating software for data CDs and DVDs only. Supported disc formats Data CD (ISO, UDF, ISO/UDF) Data DVD (ISO, UDF, ISO/UDF).”
www.nero.com
About 8% of users remove it
 
Powered by Should I Remove It?

The file 1648264_setup.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/181b2989bbf8ac18628e9ab38afa936d/570e5a34/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/d089a38617e91e53b28bc7960a781440/5890e99e/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/b30e1a0d007630684dc68d3dbd71af9d/57f62579/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/ed64e7db6747c7d9314db30590d47f42/5871fbb1/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/27bf2afba93ed413d5f5935b60321608/57de943d/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/a6834e7987537bf47de5e79e9b396247/559d45a9/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/a26e5d4e891746e7a878447f24f31e56/584f03ef/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/95a6b2b472924712da91db1158ae874c/587df8c0/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/da8c2136ca02923b82ab68c64224d41e/584c6dd3/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/703d3537fa611ac4fe74e6003050ea38/587f6908/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/ae048ec3e41e7a85503c0e0e4dfa8baf/53ff8842/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/9dc24ff020228fd72d7439ae83260c06/55f3094f/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/2325a8c68e2a4a6c7bc3b283821f4856/586672ba/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/39f1504177a81aa874f0f0fd295bb550/545fbcba/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://download.rnt.ro/.../download.php?id=109&categorie=Multimedia

http://lb.cdn.m6web.fr/d/c/a/fe27d3a83d875ca899dacfbe085033a3/57a51c03/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/64dc912b652cb1432861d9d0ff8e80b3/57d70733/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/b629ecc0c16fe63e790a0ba93bd7b89c/578af5ce/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/37e1a766f4e2a3af155baada3d3a071c/56549e68/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/e997282266c606f58362f4a68809f320/5749b1c9/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/2e30545292c9bd9c97e1e14900f34b20/57933ad2/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/f94798ddf2fdd1b5da8b4ee150fa24a1/58736fae/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/7900134c794436c6c97cf19b6b6f8f3b/5731def7/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/afd7d44de1d394f7216b8d2245d1c720/586cdcfd/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/58e631a55580127d5d6943736e74c4f5/58723906/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/7c526c494ee26d73de070fe6909d2ffd/57bb0fbd/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/c9ffc178a143654cb7cd7954b3466e34/58519557/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/7b0e6d0c73051081bc5271c428a59f45/57ecadcd/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/febf875c4855a1f81c86f5cfb5ca15df/56655a22/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

http://lb.cdn.m6web.fr/d/c/a/996f2528d4f38bc68f073d18b436da33/583afd21/soft/.../nero-essentials-free_nero_burnlite_10_francais_295676.exe

Latest 30 of 162 download URLs

Scan 1648264_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.