home

backitup_ie_1.0.6.0.exe

Nero BackItUp Stub Installer

Nero AG

Publisher:
Nero AG  (signed and verified)

Product:
Nero BackItUp Stub Installer

Version:
1.0.6.0

MD5:
8a64ac15c845bfc06728ee89685ee41e

SHA-1:
fc8211b59f192bf2ec8ab1050c87ea67cd5bee26

SHA-256:
b9e662b12b740e5d18b165653209a1f5c928efd4b906f0231418fed6266a5a27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 12:59:10 PM UTC  (today)

File size:
2 MB (2,125,296 bytes)

Product version:
1.0.6.0

Copyright:
Copyright (c) 2003-2014 Nero AG and its licensors

Original file name:
Nero BackItUp Stub Installer

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\backitup_ie_1.0.6.0.exe

Digital Signature
Signed by:
Nero AG

Authority:
Symantec Corporation

Valid from:
4/13/2015 8:00:00 PM

Valid to:
7/13/2018 7:59:59 PM

Subject:
CN=Nero AG, O=Nero AG, L=Karlsruhe, S=Baden Wuerttemberg, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4D7A5E95C92E17B8E5B31A2BD0453A49

File PE Metadata
Compilation timestamp:
6/29/2015 2:45:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:uOtBc2qU9OHgxnuAV7KT75r9b2EzBobc4aGThzXw4JQJouE4YSJ:uqc2r9OHgxn9C9b2EmFvkvEe

Entry address:
0x61A51

Entry point:
E8, 7D, 18, 01, 00, E9, 39, FE, FF, FF, E8, F1, 6E, 00, 00, 8B, 48, 14, 69, C9, FD, 43, 03, 00, 81, C1, C3, 9E, 26, 00, 89, 48, 14, C1, E9, 10, 81, E1, FF, 7F, 00, 00, 8B, C1, C3, 55, 8B, EC, E8, CB, 6E, 00, 00, 8B, 4D, 08, 89, 48, 14, 5D, C3, 55, 8B, EC, 8B, 45, 08, 85, C0, 75, 14, E8, 03, 37, 00, 00, C7, 00, 16, 00, 00, 00, E8, E7, 6B, 00, 00, 33, C0, 5D, C3, 8B, 40, 0C, 83, E0, 10, 5D, C3, 55, 8B, EC, 8B, 45, 08, 85, C0, 75, 14, E8, DD, 36, 00, 00, C7, 00, 16, 00, 00, 00, E8, C1, 6B, 00, 00, 33, C0, 5D...
 
[+]

Entropy:
7.1878

Code size:
572.5 KB (586,240 bytes)

The file backitup_ie_1.0.6.0.exe has been seen being distributed by the following 10 URLs.

http://dl.freesoftru.net/down/2d3583d108811fd05251d02b7b3dde1b/.../BackItUp_cb-31171_1.0.6.0_generic-pad.exe

http://download.nerobackitup.com/.../BackItUp_ff_1.0.6.0.exe

http://d.computerbild.de/downloads/.../BackItUp_cb-31171_1.0.6.0_generic-pad.exe

http://nero-backitup.softonic.com.br/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANI0jFJOXFWHsYqkgKBsD4OZr9unOrm0Vz0CTbU3RL6hg5nT4mGLyeDLt ZgF1BXMrCm11AlH4WUJVwDz9Zwj9psuBFsn3nKPundz293iuAp3xGk77XLLKD9jJBZODZ5ig=

http://download.nerobackitup.com/.../BackItUp_cb-31171_1.0.6.0_generic-pad.exe

http://my.nerobackitup.com/.../download-gm?aid=cb-31171&dl=download.exe

http://download.nerobackitup.com/.../BackItUp_chrome_1.0.6.0.exe

http://nero-backitup.fr.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANI0jFJOXFWHsYqkgKBsD4OZr9unOrm0Vz0CTbU3RL6hg5nT4mGLyeDLt ZgF1BXMrCm11AlH4WUJVwDz9Zwj9psuBFsn3nKPundz293iuAp3xGk77XLLKD9jJBZODZ5ig=

http://download.nerobackitup.com/.../BackItUp_ie_1.0.6.0.exe

http://my.nerobackitup.com/.../download-gm

Scan backitup_ie_1.0.6.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.