home

nero_coverdesigner_stub.exe

NeroInstaller

Nero AG

This is a self-extracting archive and installer. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Nero AG  (signed and verified)

Product:
NeroInstaller

Version:
1.7.0.8

MD5:
ee011cbe264e6fa2850523b3550ea684

SHA-1:
9432d5d1a7a50db13a31451c318b737df1082fd9

SHA-256:
8cf0d0f482dc3982e894d5a35a8df3834e6ec02cc62462d8b1796abf867a5ece

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 12:37:55 AM UTC  (today)

File size:
2.4 MB (2,563,536 bytes)

Product version:
1.7.0.8

Copyright:
(c) 2015 Nero AG and its affiliates

Original file name:
NeroInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\nero_coverdesigner_stub.exe

Digital Signature
Signed by:
Nero AG

Authority:
Symantec Corporation

Valid from:
4/14/2015 2:00:00 AM

Valid to:
7/14/2018 1:59:59 AM

Subject:
CN=Nero AG, O=Nero AG, L=Karlsruhe, S=Baden Wuerttemberg, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4D7A5E95C92E17B8E5B31A2BD0453A49

File PE Metadata
Compilation timestamp:
11/18/2010 5:27:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:f1Os2Wnilp4RyY5QeziY3LKgA0Aa7sjUCI6P/uCK:f1On2iX4EY5BiZvMY1I6P1K

Entry address:
0x14B04

Entry point:
55, 8B, EC, 6A, FF, 68, E0, B9, 41, 00, 68, 2C, 4A, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 74, B0, 41, 00, 33, D2, 8A, D4, 89, 15, D0, 33, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, 33, 42, 00, C1, E1, 08, 03, CA, 89, 0D, C8, 33, 42, 00, C1, E8, 10, A3, C4, 33, 42, 00, 6A, 01, E8, 96, 0E, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 48, 09, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
102.5 KB (104,960 bytes)

The file nero_coverdesigner_stub.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://www.nero.com/link.php?la=en-US&to=111061057&oe=0&gen_id=11&sogen_id=15&pi=32064&pg=1028&ai=145&ma=128

http://dw.uptodown.com/dwn/evFT2bk3xJ7_YadpPgl5KBp0V2BeB0VfznkgKWv8OGjSmAGmOeve2a6Ox60_pJN1FpV0IGpI5I-EwjUMQ7mFFLhE_bRjaTzwKxQQtj4p7Fx6NGlHJbNrcRL_dyyj53D2/NlYpV5QRjn5RXu2NY-76PSqytlw-E0Oc-5GPgkRCikhJb3NCiQyL5BPBcxVwy3m3AS6c-y0eVQE8ryhqBItmrRK7SnO_m_XDpqV8XYA5oBU5HijqEah9839PWWxfODFa/x8C88EoofeqbVIKXW_nMo8YGCx88_ULWzzQv9rq6Hc1k8BCx9Ln9IDZeqm9qIxoOmiUOUe7hJtM8QDNYklJyQwkBcuMvL5b_FMBv9-JmWhJNMtCRuDZyQPCMv8wWhwH4/.../

https://dw.uptodown.com/dwn/8vTHjsT_oAMbO5XtpXee9_oZtq8Mtfwkn0D318sWkKgFU5QVGjFU1C-Uz_c4UGrvkLS9k98LoFDYOPhttm8qEKgnIkkX4Ykx1ApOXvj_3Dg019Tx56iAFRUCkehzG0GP/5HseP1KXu_NcMjqpCTAsMrSlTUKoKI9YYysq8pQFEKsEkW58-mSDJPvMPpXE-eHG99xlGG3_MXcuUsLtIxx7Mz7MBaZWvxurvfAlHQt8EcJsmeo4hILY3BBPv1pY3qVZ/I-HN3qr0oUj9zfksLnpSqXGkIUWxQ2iIWaGIqlbUwnUdYLg6dePxEXBt--h4xAsu-gomBZFKHVkr5IL5xXmcmAW9qYYWLX1w9T097melwQUgfBONcEuerL38LRXdD07u/.../

http://www.nero.com/link.php?la=ru-RU&to=111061057&oe=524288&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=159&ma=128

https://dw.uptodown.com/dwn/AHR6u2VI0SmnV6Ww4bQxPjPpeGHl9bpSQQurqQ6HoS3PWPfKPygzWf-Hawy0b5dk_ip2LG1SY0TSnnw6WijvPoi_YB0PqDTiAf4qRwXfmksCTP571xHm6bTy8eZsZ9mZ/d9sVoc8jQnjWPRQqT-e91sg7eFMV0nrlF86SxcF7mPBssJH1sxYSe3PZDkZQPfQUx688pHNDIf3z4hpG4Cmd9ymZVnjFQBErvF4c1v4unVKNueySXbzeoyjLWEufIGXO/eq6j2gZlB0tVO-gWPT9kpQ6F-X25l60BWXfAM2-IhcCe5RdyN8wjxMEQClEf85bTvoSQhD1qG7hUJjtq7EsAPvH048UgiKEM9W4w4LZzjESGQayrenvFp2jIC4UwNh4R/.../

http://www.nero.com/link.php?la=de-DE&to=111061057&oe=524725&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=158&ma=128

http://www.nero.com/link.php?la=en-US&to=151149011&oe=524288&gen_id=11&sogen_id=15&pi=32064&pg=1028&ai=149

http://filehippo.com/download/file/.../

http://www.nero.com/link.php?la=it-IT&to=111061057&oe=524288&gen_id=11&sogen_id=15&pi=32064&pg=1028&ai=146&ma=128

http://www.nero.com/link.php?la=it-IT&to=111061057&oe=524288&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=158&ma=128

http://www.nero.com/link.php?la=en-US&to=111061057&oe=524288&gen_id=11&sogen_id=15&pi=32064&pg=1028&ai=145&ma=128

http://www.nero.com/link.php?la=en-US&to=111061057&oe=65641&gen_id=11&sogen_id=15&pi=32074&pg=1028&ai=146&ma=128

http://www.nero.com/link.php?la=it-IT&to=111061057&oe=524288&gen_id=11&sogen_id=15&pi=32067&pg=1028&ai=145&ma=128

http://filehippo.com/es/download/file/.../

http://www.nero.com/link.php?la=en-US&to=111061057&oe=524725&gen_id=11&sogen_id=17&pi=32102&pg=1031&ai=171&ma=128

https://nero-coverdesigner.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO/UOXmgi3za88T m8hroCom0/dOtU/.../L ccEe7t6lEJ1AfibEiTtqHO822PdnMx2rBpd33wyLKmM8NzhLwsuSDrf4Ipd2DZ4xi2xKbPn3UGJeurio=

http://www.nero.com/link.php?la=it-IT&to=111061057&oe=524288&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=159&ma=128

https://dw14.uptodown.com/dwn/Tof7PUgT8L_Qd4wqWp-CAOfAq8Y83t4iAvMWSYLWN4T1CUqwjtu6FZ-YGsnMBEyYNmfyZdhsgavQeLThv70ND1oeAcbeFzlZrD2oxPJtzHt0wJbnWVUlAGvptoEDMFTv/bD8U8vdaAsjxCXzQrvAVowhzLUFEvhP08woPVfRkBbfW82gBk8i5dUsTm_2InTeq3jQfqXDW_18XZKo7r0Y-0IlysNsSS1AjFbTDlNDS85fZvcwQJ55KU68oQwmAnV96/AddMVB4wF-r2p59kECzV529ogh8KfClmhej6GlRYhcOhr0KD-8pCab-HrjgHj0ZgeTtMzXbIJpQucIRBFuTXJyBALTPGluCnazifneVyt9DwYZxk679dUkwA-ptz13A3/.../nero-coverdesigner-17-0-9000.exe

http://www.nero.com/link.php?la=es-ES&to=111061057&oe=524288&gen_id=11&sogen_id=15&pi=32067&pg=1028&ai=145&ma=128

http://i_eazel-com_nero-cover-designer-17-0-9000.firedlopbura.com/crawled_soft/2/3/.../233254-683334-nero-cover-designer.exe

http://www.nero.com/link.php?la=ru-RU&to=111061057&oe=524725&gen_id=11&sogen_id=17&pi=32102&pg=1031&ai=171&ma=128

http://www.nero.com/link.php?la=nl-NL&to=151149011&oe=0&gen_id=11&sogen_id=15&pi=32064&pg=1028&ai=149

http://nero-coverdesigner.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOXcWk/i WOGeImNQ/7BxXuZjFDhQ9se21tQpx7z9Uc2md1s4pcdTnJPTkktvTSNbybIbIc/.../AWvY2M2lJcGVESmg5vtYtly8tlPm46aSB504=

&onid=2141&oid=3001-2141_4-76086553&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/music-management&topicbrcrm=&pid=14503407&mfgid=63258&merid=63258&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=75aa93f1684299d694af6e34&viewguid=fWmLvmzS2eUnMP-ZNY8HcnWNrADdxC@ckItm&destUrl=http://files.downloadnow.com/s/software/14/50/34/.../Nero_CoverDesigner_3p.exe

http://www.nero.com/link.php?la=en-US&to=111061057&oe=0&gen_id=11&sogen_id=17&pi=32101&pg=1031&ai=63&ma=128,155,170,171,172,173,175

http://www.nero.com/link.php?la=en-US&to=111061057&oe=524725&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=159&ma=128

http://filehippo.com/it/download/file/.../

http://nero-coverdesigner.software.informer.com/.../

http://www.nero.com/link.php?la=de-DE&to=111061057&oe=0&gen_id=11&sogen_id=16&pi=32083&pg=1030&ai=159&ma=128

Latest 30 of 61 download URLs

Scan nero_coverdesigner_stub.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.