home

nero-10.0.13200_tom247.exe

Nero AG

This is a setup program which is used to install the application. This is installed with Nero Update. The file has been seen being downloaded from filez.kappa.ro.
Publisher:
Nero AG  (signed and verified)

Version:
1.0.1.0

MD5:
8f6b58d4239e9ed1e9599f6833d6346d

SHA-1:
a32e53bff5d357175d56f01c104d089054871abf

SHA-256:
297a099f482d656e72175d2db4f0dd61d77d14c7c070dc06d59c12e216bcf2e3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:44:40 AM UTC  (today)

File size:
292.5 MB (306,715,800 bytes)

Product version:
1.0.1.0

Original file name:
NeroSFX.exe

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Nero AG

Authority:
VeriSign, Inc.

Valid from:
5/11/2009 3:00:00 AM

Valid to:
6/22/2012 2:59:59 AM

Subject:
CN=Nero AG, OU=LEGAL DEPARTMENT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nero AG, L=Karlsbad, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7D71513F7643F5FDBB5855E9FCE34351

File PE Metadata
Compilation timestamp:
3/23/2010 12:18:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6291456:Q4qQg2dYl/VbkneEAzF7GTKt5sjYj9IIbwDh8qoRblWwAwecgM6wS:+2+nbkeEABKTLaWIbw98VlWnNcs

Entry address:
0x1384D

Entry point:
E8, 5C, 56, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, A0, 3B, 43, 00, 75, 02, F3, C3, E9, DC, 56, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 72, 1E, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, BB, 13, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, A2, 57, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 81, 21, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8...
 
[+]

Entropy:
7.9994  (probably packed)

Code size:
164 KB (167,936 bytes)

The file nero-10.0.13200_tom247.exe has been discovered within the following program.

Nero Update  by Nero AG
Nero Update Manager is a program designed to manage all installed Nero programs on the user's PC and check for and update any new versions of the software if available. This service will run in the background when Windows starts and periodically check for updates.
www.nero.com
22% remove it
 
Powered by Should I Remove It?

The file nero-10.0.13200_tom247.exe has been seen being distributed by the following URL.

http://filez.kappa.ro/download/utilities/.../Nero-10.0.13200_trial.exe

Scan nero-10.0.13200_tom247.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.