» auto_updater_shim.exe
Overview
Analysis
File Details
Programs (6)

auto_updater_shim.exe

PhotoShow

Nero AG

This file is installed with multiple programs including Nero Info and Nero 12 Content Pack.

File name:

Publisher:

Simple Star, Inc. (signed by Nero AG)

Product:

PhotoShow

Version:

3.0.0.85

MD5:

25461dfe6b183cb138812fc64568de50

SHA-1:

3f22f67631abf39881132965b7f1eaeab239e4dd

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 10:31:25 PM UTC (today)

Scan engine

Detection

Engine version

Vba32 AntiVirus

suspected of Unknown.Win32Virus

3.12.14.2

File size:

313.5 KB (321,040 bytes)

Product version:

3.0.0.85

Original file name:

auto_updater_shim.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\nero\photoshow 5\data\xtras\auto_updater_shim.exe

Digital Signature

Signed by:

Nero AG

Authority:

VeriSign, Inc.

Valid from:

4/18/2007 2:00:00 AM

Valid to:

4/18/2009 1:59:59 AM

Subject:

CN=Nero AG, OU=PhotoShow, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nero AG, L=Karlsbad, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

065C52D2227BB720BE44DD9BCC9A783D

File PE Metadata

Compilation timestamp:

4/20/2007 12:25:33 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:2AUeQHjwg2uChPAEIXN/KmZZlxELTDr9X/JSMeCJhzDLkpkr:2RHjwg2XhPAEQN//xEVX/JS6JJDIpkr

Entry address:

0x2C861

Entry point:

55, 8B, EC, 6A, FF, 68, E8, B8, 43, 00, 68, A0, 30, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 9C, B0, 43, 00, 33, D2, 8A, D4, 89, 15, F8, 65, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, F4, 65, 44, 00, C1, E1, 08, 03, CA, 89, 0D, F0, 65, 44, 00, C1, E8, 10, A3, EC, 65, 44, 00, 33, F6, 56, E8, 84, 33, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 18, 66, 00, 00, FF, 15, A0, B0, 43, 00, A3, F4, 7C, 44, 00, E8... 
[+]

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

232 KB (237,568 bytes)

The file auto_updater_shim.exe has been discovered within the following programs.

Nero 11 InfoTool by Nero AG

Publisher's description - “Nero InfoTool provides information about the most important features of installed drives, inserted discs, installed software, and much more.”

www.nero.com

About 6% of users remove it

Nero 12 by Nero AG

Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG.

10% remove it

Nero 12 Content Pack by Nero AG

This is part of Nero Creative Packs which include series of Standard and HD animations, transitions for enhancing video editing projects.

11% remove it

Nero Backup Drivers by Nero AG

These are the drivers the Nero backup service utilizes. Nero Backup Drivers is listed separately in Program and Features in addition to Nero 10, 11, etc.

23% remove it

Nero Info by Nero AG

www.nero.com/enu/support-nero8-tools-utilities.html

8% remove it

Nero Recode 2016 by Nero AG

About 4% of users remove it

Scan auto_updater_shim.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.