home

setupX.exe

Nero MultiInstaller

Nero AG

This is the uninstaller utility registered in the Windows Control Panel for the program Nero Suite. The file has been seen being downloaded from doc-00-9k-docs.googleusercontent.com.
Publisher:
Nero AG

Product:
Nero MultiInstaller

Version:
2, 0, 3, 24

MD5:
066219ac745659226afb28dc5434abb5

SHA-1:
085d525692315fe853e6f0827b91a636b1f9ca96

SHA-256:
9525b5154da46dba11036ea393e9b6f0b3cf6e04e0fec309da870709d3377f03

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:55:01 PM UTC  (today)

File size:
1.3 MB (1,409,024 bytes)

Product version:
2, 0, 3, 24

Copyright:
Copyright © 2005

Original file name:
setupX.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\common files\nero\uninstall\setupx.exe

File PE Metadata
Compilation timestamp:
5/10/2005 8:18:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:knoOClz7WhjOKC6mt580ws2HA1c631CtSA7hy75FfySttgFP6T3MP0sMTw5Jqf5:NL32MlTH7/ySttPDvSYh

Entry address:
0x9158D

Entry point:
55, 8B, EC, 6A, FF, 68, B0, D2, 4C, 00, 68, 78, 8F, 49, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 24, 43, 4C, 00, 33, D2, 8A, D4, 89, 15, 90, EB, 4F, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 8C, EB, 4F, 00, C1, E1, 08, 03, CA, 89, 0D, 88, EB, 4F, 00, C1, E8, 10, A3, 84, EB, 4F, 00, 6A, 01, E8, 28, 79, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, FF, 4A, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.8980

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
780 KB (798,720 bytes)

Program Uninstaller
Program name:
Nero Suite

Uninstall string:
C:\Program Files\Common Files\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""


The file setupX.exe has been seen being distributed by the following URL.

https://doc-00-9k-docs.googleusercontent.com/docs/securesc/kg9755sl727dbgj5cgoqa7h9pfgflu10/s4plf05dp8dppe6s2mmjogh4jgudv12p/1454263200000/.../09936784787755265606/0B82gx_mqelhGYU16QTFmWVF1SjA?e=download&nonce=o2kvlkmejqbcm&user=09936784787755265606&hash=cne4fgr3ch6dds27hopq89bmoq18utta

Scan setupX.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.