home

burnsetup.exe

ExpressBurn

NCH Software

This is a setup and installation application. This is installed with Express Burn Disc Burning Software. The file has been seen being downloaded from global-shared-files-l3.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
ExpressBurn

Description:
Express Burn

Version:
4.68+

MD5:
952fbd695ffdd6c7b2915e6efeed8d02

SHA-1:
53e8e12875a924f7fc677ec88a5adf9229a39f59

SHA-256:
60aeac59f6a24c7b80bb9915ade03751295cf1b8a34ea7ef95478a3157e831f2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/4/2024 6:35:25 AM UTC  (today)

File size:
804.6 KB (823,888 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\burnsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/19/2013 9:00:00 PM

Valid to:
8/7/2015 8:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
9/10/2013 9:59:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:s6/o2LlORfbZqVaf/lJZaLooHMTzSEgDwIbfg0CoLw:1oSUMVw3GAgtfg0v0

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 10, 10, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 1C, 10, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 38, 10, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 00, 10, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9943

Developed / compiled with:
Microsoft Visual C++

The file burnsetup.exe has been discovered within the following programs.

Express Burn Disc Burning Software  by NCH Software
Publisher's description - “Express Burn is a free CD burning program. With Express Burn you can record a data or audio discs quickly and easily by dragging the files you want onto the icon and clicking Burn CD. The software then does the rest, including converting the files if required.”
www.nchsoftware.com
25% remove it
 
Powered by Should I Remove It?

The file burnsetup.exe has been seen being distributed by the following 9 URLs.

http://global-shared-files-l3.softonic.com/53e/8e1/.../file?nvb=20141018154853&nva=20141019034953&token=01f295646bb00ea7bd3e2&instance=softonic_en&filename=burnsetup.exe

http://global-shared-files-l3.softonic.com/53e/8e1/.../file?nvb=20141126081354&nva=20141126201454&token=0f32bd6a6cf83ac79b39b&id_file=37345&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=burnsetup.exe

http://global-shared-files-l3.softonic.com/53e/8e1/.../file?nvb=20140906151954&nva=20140907032054&token=0acddbbf13672da284859&id_file=37345&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=burnsetup.exe

http://www.nchab.notlong.com/

http://global-shared-files-l3.softonic.com/53e/8e1/.../file?nvb=20141022140708&nva=20141023020808&token=054d5a1226f427eeb8e3d&instance=softonic_en&filename=burnsetup.exe

http://www.tamindir.com/indir/MjAxNC0wNy0yMSAxNjo0MTo0MQ==/express-burn/.../4.66

http://www.tamindir.com/indir/MjAxNC0wNy0yNCAyMzowODoyMw==/express-burn/.../4.66

http://software-files-a.cnet.com/s/software/13/58/21/.../burnsetup.exe

http://www.nch.com.au/.../burnsetup.exe

Scan burnsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.