» run_cmd_line_as_admin.exe
Overview
Analysis
File Details
Programs (7)

run_cmd_line_as_admin.exe

PhotoShow

Simple Star, Inc.

File name:

Publisher:

Simple Star, Inc. (signed and verified)

Product:

PhotoShow

Version:

5.0.0.0

MD5:

30cf6882453aedf4576d80c42df4fd92

SHA-1:

eebaf7d8ca782e359d5ae8673e42e4b0be07511d

SHA-256:

97f48081f8fec8c85f49170aae5eb0e8426e72dd07da1a98a6d5152004ca0f08

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 12:15:26 PM UTC (today)

File size:

77.5 KB (79,352 bytes)

Product version:

5.0.0.0

Original file name:

run_cmd_line_as_admin.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\nero\photoshow 5\data\xtras\run_cmd_line_as_admin.exe

Digital Signature

Signed by:

Simple Star, Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

3/31/2006 1:25:35 AM

Valid to:

4/25/2007 8:19:36 PM

Subject:

CN="Simple Star, Inc.", OU=PhotoShow, O="Simple Star, Inc.", L=San Francisco County, S=California, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

245046B396E1FF1C591AEBA0596587A8

File PE Metadata

Compilation timestamp:

1/31/2007 2:26:18 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

768:h87EjXsfQ0vWSf247YGGc/23iB9GQgl4lDAjeVhoRF760wqq7ai9CLhpk/3nTL3h:h8Q1Sf24Egul4O4oRlFF/pk/3nTV

Entry address:

0x33C2

Entry point:

55, 8B, EC, 6A, FF, 68, A0, 91, 40, 00, 68, 2C, 40, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 58, 90, 40, 00, 33, D2, 8A, D4, 89, 15, 98, C0, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 94, C0, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 90, C0, 40, 00, C1, E8, 10, A3, 8C, C0, 40, 00, 33, F6, 56, E8, 73, 19, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 0F, 2D, 00, 00, FF, 15, 54, 90, 40, 00, A3, 90, D7, 40, 00, E8... 
[+]

Developed / compiled with:

Microsoft Visual C++ v6.0

Code size:

32 KB (32,768 bytes)

The file run_cmd_line_as_admin.exe has been discovered within the following programs.

Nero 12 by Nero AG

Nero Multimedia Suite is a popular software suite for Microsoft Windows by Nero AG.

www.nero.com

10% remove it

Nero 12 Content Pack by Nero AG

This is part of Nero Creative Packs which include series of Standard and HD animations, transitions for enhancing video editing projects.

11% remove it

Nero 8 by Nero AG

7% remove it

Nero Backup Drivers by Nero AG

These are the drivers the Nero backup service utilizes. Nero Backup Drivers is listed separately in Program and Features in addition to Nero 10, 11, etc.

23% remove it

Nero Info by Nero AG

Publisher's description - “Nero InfoTool provides information about the most important features of installed drives, inserted discs, installed software, and much more.”

www.nero.com/enu/support-nero8-tools-utilities.html

8% remove it

Nero Recode 2016 by Nero AG

About 4% of users remove it

SecurDisc Viewer by Nero AG

Publisher's description - “SecurDisc is the comprehensive, state-of-the-art protection solution for CDs, DVDs and Blu-ray Discs, offering multiple levels of protection for data, music, photo and video files. Rest assured that sensitive data is safe with SecurDisc.”

26% remove it

Scan run_cmd_line_as_admin.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.