home

nero2016-03.03.2016_stub_trial.exe

NeroInstaller

Nero AG

This is a self-extracting archive and installer. The file has been seen being downloaded from ftp22.nero.com.
Publisher:
Nero AG

Product:
NeroInstaller

Version:
1.7.0.8

MD5:
a203ea6086e3d7faf063c325b95f6f27

SHA-1:
437a07db027841be832183a8f9a835c2bf824a4a

SHA-256:
e00cca30e9b8e6ecc720b4034df1ac2caef52d3dad13d9e9101f08dddd47d959

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:16:53 AM UTC  (today)

File size:
2.5 MB (2,629,072 bytes)

Product version:
1.7.0.8

Copyright:
(c) 2015 Nero AG and its affiliates

Original file name:
NeroInstaller.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\nero2016-03.03.2016_stub_trial.exe

File PE Metadata
Compilation timestamp:
11/18/2010 7:27:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:V1OsRW6Hilp4RyY5QeziY3LKgA0Aa7sjUCI6P/uCN:V1O0DHiX4EY5BiZvMY1I6P1N

Entry address:
0x14B04

Entry point:
FF, CD, 80, D8, 25, 68, 8E, 4A, E0, 00, 50, 4E, 56, 68, 37, B9, 61, 00, 0F, AF, D1, E8, 1C, 00, 00, 00, BF, 55, 88, D5, A2, 84, F7, C7, C1, 69, 6E, 7B, 1C, 81, DE, 44, EF, 93, 94, 50, 8A, E2, 5A, F6, D4, 2B, EA, 41, 0F, AF, D1, 81, D0, 6F, 45, B4, FB, 88, EA, FE, C4, 0F, CB, 8D, 3D, F0, 00, 00, 00, 8B, ED, 81, F7, F0, 00, 00, 00, 81, EF, AF, 0A, 00, 00, EB, 0A, F7, DE, 69, EF, DC, A7, 71, B7, 8A, CE, 81, C7, AF, 0A, 00, 00, 76, 02, F6, DA, 8D, 1D, 9E, BE, 1B, 7C, 2A, F4, 81, C7, 5F, F9, FF, FF, F6, DF, 81...
 
[+]

Entropy:
7.5780

Code size:
102.5 KB (104,960 bytes)

The file nero2016-03.03.2016_stub_trial.exe has been seen being distributed by the following URL.

http://ftp22.nero.com/.../Nero2015-16.0.05500_trial.exe

Scan nero2016-03.03.2016_stub_trial.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.