home

nero_free.exe

Nero Installation

Nero AG

This is a self-extracting archive and installer. The file has been seen being downloaded from www.signstourbest.com.
Publisher:
Nero AG

Product:
Nero Installation

Version:
4.42

MD5:
45400938a8eca3f4bdfaff13bc339fb3

SHA-1:
7ebe48b07e7b98638784271713266b4cb4fa0ebe

SHA-256:
4d614c6c8a87554ff108a05d9e0b5f4ed57d5d4ea8fbad8a945c05dd4eac5a61

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:47:39 AM UTC  (today)

File size:
6.7 MB (6,978,720 bytes)

Product version:
4.42

Copyright:
Copyright 2007 Nero AG and its licensors

Original file name:
7zS.sfx

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\nero_free.exe

File PE Metadata
Compilation timestamp:
8/17/2009 12:03:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:HQN1jJ9qEXCdGxTQdF4mKIcFuOGbyBMJ8K77lZ+D5XUtvAqvpqhieDehfd:HQvvq+eMTQdF4mgF2Wa2KOuqhiXfd

Entry address:
0x28D6F

Entry point:
E8, 79, 38, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, F8, 0F, 45, 00, 89, 0D, F4, 0F, 45, 00, 89, 15, F0, 0F, 45, 00, 89, 1D, EC, 0F, 45, 00, 89, 35, E8, 0F, 45, 00, 89, 3D, E4, 0F, 45, 00, 66, 8C, 15, 10, 10, 45, 00, 66, 8C, 0D, 04, 10, 45, 00, 66, 8C, 1D, E0, 0F, 45, 00, 66, 8C, 05, DC, 0F, 45, 00, 66, 8C, 25, D8, 0F, 45, 00, 66, 8C, 2D, D4, 0F, 45, 00, 9C, 8F, 05, 08, 10, 45, 00, 8B, 45, 00, A3, FC, 0F, 45, 00, 8B, 45, 04, A3, 00, 10, 45, 00, 8D, 45, 08, A3, 0C, 10, 45, 00, 8B...
 
[+]

Code size:
268 KB (274,432 bytes)

The file nero_free.exe has been seen being distributed by the following URL.

http://www.signstourbest.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

Scan nero_free.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.