home

nitro_reader3.exe

Nitro PDF Reader (en-US)

Nitro PDF Software

This is a setup and installation application. This is installed with Nitro Reader 3. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Nitro PDF Software  (signed and verified)

Product:
Nitro PDF Reader (en-US)

Description:
Installation and setup files for Nitro PDF Reader (en-US)

Version:
2.1.1009.0

MD5:
a34bf526f7f1901c02adf191fcab938b

SHA-1:
bc1da512862a0d08193b20ea5339a7d2ef4a79f3

SHA-256:
9d0296237cca1647c1c1c6a72c87dec426c4acf0d00e5d22bcb9025460d0ed31

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:11:00 AM UTC  (today)

File size:
27.3 MB (28,630,280 bytes)

Product version:
2.1.1009.0

Copyright:
(c) 2009 Nitro PDF Software

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\nitro_reader3.exe

Digital Signature
Signed by:
Nitro PDF Software

Authority:
COMODO CA Limited

Valid from:
1/10/2012 1:00:00 AM

Valid to:
1/10/2015 12:59:59 AM

Subject:
CN=Nitro PDF Software, O=Nitro PDF Software, STREET="Level 3, 370 Little Bourke Street", L=Melbourne, S=Victoria, PostalCode=3000, C=AU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F1748BE12F68AB2638013D4F6C363A50

File PE Metadata
Compilation timestamp:
11/12/2009 8:01:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:x5wrZY+Mqb1TAS7LaKW/agPQnhvfaMholbd:x5wtUSHsCgPQnkh

Entry address:
0xA7063

Entry point:
E8, 86, E3, 00, 00, E9, 16, FE, FF, FF, B8, 0F, 5F, 4B, 00, A3, 60, B9, 4F, 00, C7, 05, 64, B9, 4F, 00, 0B, 56, 4B, 00, C7, 05, 68, B9, 4F, 00, C9, 55, 4B, 00, C7, 05, 6C, B9, 4F, 00, FD, 55, 4B, 00, C7, 05, 70, B9, 4F, 00, 73, 55, 4B, 00, A3, 74, B9, 4F, 00, C7, 05, 78, B9, 4F, 00, 89, 5E, 4B, 00, C7, 05, 7C, B9, 4F, 00, 89, 55, 4B, 00, C7, 05, 80, B9, 4F, 00, F3, 54, 4B, 00, C7, 05, 84, B9, 4F, 00, 82, 54, 4B, 00, C3, E8, 9B, FF, FF, FF, E8, BE, EE, 00, 00, 83, 7C, 24, 04, 00, A3, 08, 03, 50, 00, 74, 05...
 
[+]

Entropy:
7.9935  (probably packed)

Code size:
824 KB (843,776 bytes)

The file nitro_reader3.exe has been discovered within the following program.

Nitro Reader 3  by Nitro PDF Software
Publisher's description - “Do everything you expect with a PDF reader, and then some. Create PDF files from any source easily. Sign them securely. Then collaborate with anyone, anywhere. Nitro PDF Reader allows you to create PDF files from over 300 different formats. Comment, review, and collaborate.”
nitroreader.zendesk.com/forums
3% remove it
 
Powered by Should I Remove It?

The file nitro_reader3.exe has been seen being distributed by the following 38 URLs.

http://lb.cdn.m6web.fr/d/c/a/dcb987636a5f5617b0f5ef34a53b6ffa/547fa1bb/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://soft.archive1.clubic.com/files/a23917dc870d4c16ba5f337af1fe31cd/52d85e92/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/bd2bc5c922a97d78caf01eb6bd3ebab1/55631bdf/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/54d5117d770fb462cf9474a305238730/57f7d35c/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://d210.cdn.m6web.fr/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://www.filehorse.com/download/file/.../

https://store.nitropdf.com/304/cookie?affiliate=3043&redirectto=http://install.nitropdf.com/reader/.../nitro_pdf_reader.exe

http://lb.cdn.m6web.fr/d/c/a/df2c5bb9b8f631d9d76b5d83d7b7e7f4/56cd7d5f/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/e9c921115d3767b4ec01f4bd77f86a16/58217e88/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://www.skidajmo.com/downloads/.../1370

http://file.dl1.svit.vn/download/6fbc0ce0/6c5fb8cafd4b0e45763331d4e2714809/2013/.../SinhVienIT.Net--nitro_reader3.exe

http://share2.earthlinktele.com/download.aspx?file=59802163&sig=MDUvMDkvMjAxNiAxODo0Mjo0NA==

http://lb.cdn.m6web.fr/d/c/a/58d6cc8ec9a9d98c8e07131509e5ab8e/56a0d921/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/3889cd741776e94ee60c74f117c6a304/5595fc47/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://files1.majorgeeks.com/dbe272bab69f8e13f14b405e038deb64/.../nitro_pdf_reader.exe

http://lb.cdn.m6web.fr/d/c/a/8080f6fa62e2e9bd9159458a8fca122c/54eefc54/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/87f78e485a1e3e37fcadb373c040ca87/56a36dd1/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/720ae5455f4507f951362f4620bf87bd/564fc438/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/fa6ef7ad7ac8cccebd0bff88affad3d8/56ae6c4b/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://www.skidajmo.com/download.php?path=1285257375778

http://dw.html.it/index.php?softname=nitro_pdf_reader_3.5.6.5.exe&code=1453322977&q=NTk0NzJ8bml0cm8tcGRmLXJlYWRlci05

http://lb.cdn.m6web.fr/d/c/a/669bb1a20714e4cca6e03f7e0a1a4b93/56e82a16/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://lb.cdn.m6web.fr/d/c/a/a5c7eab55d6b9477b590579fb7f60d43/56bf56d3/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://install.nitropdf.com/reader/.../nitro_pdf_reader.exe

http://download.id/.../nitropdf_DOWNLOAD.ID.exe

http://soft.archive2.clubic.com/files/b1500bfaf0f8b3b8455e0b27d691c8e7/527b7c1a/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://dl.filehorse.com/win/office-and-business-tools/.../Nitro-PDF-Reader-3.5.6.5-(32-bit).exe

http://lb.cdn.m6web.fr/d/c/a/eef304f56c3491421acf7abd6cb88d04/5501fbd2/soft/.../nitro-pdf-reader_3-5-6-5_en_324052_32.exe

http://www.filehorse.com/download/file/.../

Latest 30 of 38 download URLs

Scan nitro_reader3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.