» nero_kwikmedia-12.0.01300_free.exe
Overview
Analysis
File Details
Programs (1)
Downloads (7)

nero_kwikmedia-12.0.01300_free.exe

Nero Self Extractor

Nero AG

This is a setup program which is used to install the application. This is installed with Nero Kwik Media. The file has been seen being downloaded from ftp1.usw.nero.com and multiple other hosts.

File name:

Publisher:

Nero AG (signed and verified)

Product:

Nero Self Extractor

Version:

12.0.2.0

MD5:

22e1598604d31e93fc6fdcae4a6bdeff

SHA-1:

2713f7536b94c1f37edad4ff5d2b11f3c2f00397

SHA-256:

2c12921d7052543716e3690252da8682ab8472e24567930d70095596840236b5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 2:37:11 AM UTC (today)

File size:

171.3 MB (179,577,680 bytes)

Product version:

12.0.2.0

Original file name:

NeroSFX.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\nero_kwikmedia-12.0.01300_free.exe

Digital Signature

Signed by:

Nero AG

Authority:

VeriSign, Inc.

Valid from:

4/22/2012 2:00:00 AM

Valid to:

6/22/2015 1:59:59 AM

Subject:

CN=Nero AG, OU=LEGAL DEPARTMENT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nero AG, L=Karlsbad, S=Baden Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3F5F2725B11E258A905707175244664A

File PE Metadata

Compilation timestamp:

3/23/2012 2:10:52 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3145728:XAubmhfpriBZWJ/eruOBBOdrKbajecwAI7XPTQTpsoLbeRurklIhCh0C0lIWdj4U:X9bspriWJgdB8rqDXrQtPORQklcI0fl1

Entry address:

0x121E78

Entry point:

E8, 6B, 9F, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 90, 15, 5B, 00, 75, 02, F3, C3, E9, F2, 9F, 00, 00, 8B, FF, 51, C7, 01, 2C, 13, 58, 00, E8, EA, A0, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, D1, F0, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 29, A1, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 57, 33, DB, 6A, 07, 33, C0, 59, 8D, 7D, E4, 89, 5D... 
[+]

Code size:

1.3 MB (1,393,152 bytes)

The file nero_kwikmedia-12.0.01300_free.exe has been discovered within the following program.

Nero Kwik Media by Nero AG

Nero Kwik Media connects immediately and automatically to all your photos, your music and videos. All photos, videos and music. Organization, playback, sharing and synchronization.

www.nero.com/eng/products/nero-kwik-media

21% remove it

The file nero_kwikmedia-12.0.01300_free.exe has been seen being distributed by the following 7 URLs.

http://ftp1.usw.nero.com/PUB/.../Nero_KwikMedia-12.0.01300_free.exe

http://ftp12.de.nero.com/PUB/.../Nero_KwikMedia-12.0.01300_free.exe

http://ftp22.nero.com/Nero11/.../Nero_KwikMedia-12.0.01300_free.exe

http://ftp22.nero.com/.../Nero_KwikMedia-12.0.01300_free.exe

http://ftp12.de.nero.com/PUB/.../Nero_KwikMedia-12.0.01300_free.exe

Scan nero_kwikmedia-12.0.01300_free.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.