home

nis_21.1.0.18_symtb_tmd_mrftt_820_10131.exe

Norton Internet Security

Symantec Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from norton-internet-security.ro.softonic.com and multiple other hosts.
Publisher:
Symantec Corporation  (signed and verified)

Product:
Norton Internet Security

Version:
21.1.0.18

MD5:
0bf5d87914c1d6ae961e57d62afd87ea

SHA-1:
ae62fc243c63cd6a3d0ddeb2657fd38b17c02500

SHA-256:
1231aac7064fdf5e2ae1616ee9db6c5e6cdd26d95c40c0b9d327751ddd5487ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:00:52 AM UTC  (today)

File size:
212.8 MB (223,165,336 bytes)

Product version:
21.1.0.18

Copyright:
Copyright © 2013 Symantec Corporation. All rights reserved.

Original file name:
NIS_TW.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\nis_21.1.0.18_symtb_tmd_mrftt_820_10131.exe

Digital Signature
Signed by:
Symantec Corporation

Authority:
VeriSign, Inc.

Valid from:
9/8/2010 4:00:00 AM

Valid to:
11/24/2013 3:59:59 AM

Subject:
CN=Symantec Corporation, OU=Symantec Research Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
66660552D465B31F429F7527EA6A93BF

File PE Metadata
Compilation timestamp:
10/8/2013 8:51:22 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:s/CQ2Gt6tgghd10SaxES8e84+CnV18t/OQTPgyvD8nasxgCzQ8qHeEM0sTmQ5mjN:s/9G1078EV18tRTxvwnaMQ8qWIjDdbjb

Entry address:
0x5377A

Entry point:
E8, 6E, 72, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, FF, 75, 08, E8, 20, A4, 01, 00, 59, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, 14, F2, 4B, 00, 00, 74, 13, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 05, E9, 2C, 67, 00, 00, F7, C7, 03, 00, 00, 00, 75, 14, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 29, F3, A5, FF...
 
[+]

Code size:
561 KB (574,464 bytes)

The file nis_21.1.0.18_symtb_tmd_mrftt_820_10131.exe has been seen being distributed by the following 26 URLs.

http://norton-internet-security.ro.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqSJoKSnkZY=

https://dw.uptodown.com/dwn/ggFLKXpSu_uKQ1MjzKXyy8Yl7uSBWngd5BFShHeotjmsKb2spnAr5zoKv0ldNVgGG18jkN6k7aaTWxRnmYDfM0Fg2HlMKHPYHe-mEctGHXTK7Bleo_ifObVHeEQsdga_/YaUxJ7DQP3OXCOpY12t0exZBH3cNa7DR9dPf_ftjnX2XJDCiDHcMRlgfozujVqrZv4Mduj_bL9L3QSmC8NexmDmhOu4s_iq7Ga3JmodTZRqlR-1tCqf7bUhlA00F8-eF/3WIOOhx3Q80tmZdZ-_4TMUuXXoRi-DQ4L2hy-pOgjtud6ZK5MSdq0Ob3QfQOH-kbPWDaPH9hJRXjmRoFM4ZUczndQhxpOA9E0cD37KGOOQ91RzDXFN4A2Pu3Zg-xmBPW/.../

http://gsf-cf.softonic.com/ae6/2fc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_en&type=PROGRAM&Expires=1430443849&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=aqHZRa6bCbeUqmPGmZbo2uU9ov536AFSAL-NQzL6XCHFVNWMJygkQt0M5NKbKWqFyDY5OKkLEXgWCjUW~phj9nkcUOvoSXtG~wg2bJe7W2k3zXpjQKYodtGiPHfgvcxYzM10uTTiIJ6mj32K5n0LZiSn1GePEJ0ep04veeZiT88_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com//ae6/2fc/.../file?id_file=9907&channel=WEB&instance=softonic_br&type=PROGRAM&fdh=no&SD_used=0&Expires=1408872799&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FKL41s-qbjpCH~E0DLs8huzUztfQ7cIkycAZORbOTiTSHg6QPDRdgHpJ0SB4dJAIE4P1Sl4dRy~TzkmOj4ofXochvOV~wouDier4pY8ocetk7s~8mQ9iJy~7t8qoj~Z8Nsz6W-2cEyLDxyLDBNIU1AZtnXRpFogbN1Hh48emRBU_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com/ae6/2fc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_es&type=PROGRAM&Expires=1418498040&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Kynor1efA2BhjWZLRwCJGo7zCck9U0cUGhSKdLOP7znPazd8EZLfsoCnkqcy0MI0Ic2YZCxCHQZgtEuwtNg54bSK70mZeXureev-gVP52zpnp69VXYoK3m3XsxhAGIarE4MzP1rhCKaO-lEiMq4EgbonceBHGVZdeaLialg6qMI_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com//ae6/2fc/.../file?id_file=9907&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1408184186&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dWIYC9Xx4AmHDHpz4EsyW-AA48Ir1EUJwlbBGFxjuZKzuHIKfCRSBWNA9lWus7i7Pa8sH8IZT7jho0qKDBWtwhASfDP7X0JYScO3GrpQ8kiODDWSbCVAR02mo2gNDJo2mMfbJRBLnPIxPxNBrvnuha5s4W8utN4uhUpE32lv1Zk_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

https://dw.uptodown.com/dwn/GjGPouQz5lk6U920yUQBkWtrDz-w46-XdpoH6O3fu4w1WpD-NZ3wzL6JwxkF_j3jdHu1VH1kPDONbZD2AKEjlqGtn_Hojc-rLl2cFjilKsaVkXIRxzLkq6JSguExsXRO/dASEj5RLuiNrksdVZa5JH86yptusxo-jrufcMYxmP1DkH1ZOiuebn8E8RCTDpyqyxftvCz207GY_9I5PqelVME9v1wYPvz2KBUA6PS_AKqIur9q_3VOZMYvhWWS1qkc1/CL9OfSQSQpO8Nf2ntBIMCTWvnBDuxTehJVWWHCESUglhw7XNkdcufsL9CsfrtlRu3ZXt6V1cv5jGF0lFjH2DxnXoYL5DWAgqtTVq7M8csV_dW2vp4fgUhRs84WuCVI5b/.../

http://gsf-cf.softonic.com/ae6/2fc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_es&type=PROGRAM&Expires=1426822180&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=aGNLpPlVewLC9MxS5ld51bODug1EceRUJffBeWastcuZ6r9uU67rU-U7i7vXrbuc6IqhH3V4UT2VKkYb50I7ATr38GF49Nwcpl-EirkGo~4HzFD45P6twzjIt5GZwdsyKg6SY16lVzvnvrXYCGYRydKUZzCdeyWxOUIJYFqg~uc_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com//ae6/2fc/.../file?id_file=9907&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1399154264&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hLu5-z5LJwDbOXFYfW2rp7oyV3qlHUNcoVbJb9pX2Nx6TOkRMSqINLGZZBlZ6rrD7amPdyrHMKvfRLpc4aJKMQnEhvh19BD0mIrUoKYUtLLJU-uYgUIGcimkX26ycYfnGk05Ln~LU3ONEVfY6mzAOQABako0F7Z~H3QCSwKZicg_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://global-shared-files-l3.softonic.com/ae6/2fc/.../file?nvb=20140624045744&nva=20140624165844&token=0d7bfb1847a6b5eb46b06&id_file=9907&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://www.softonic.fr/sads/tracker.php?ev=c&co=FR&sid=6903247fd83bb47f222182ea7398e317&upv=75e3f232bd8f8003f2d5d8b519075dce&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA49AC2869DB61D33B3DF115838C24529037152532BF1BCE0D891C71F9190632A295072FA4AB23E54E4A3E30D506EC71C60C1695803D2ED61A6C8574D5425FF96D9F89ED734DF876B2ED64647E0D45EFDBBE16659E842F87AAEAA07C9A1A52FC28B0BD69F4229B4B34FA893137859581AF9FC2CE36C130980705DC09053C167860C834901E3005478EEE806509766CBE2A0D612FF8A97C6CF6C2ADD901698A938F&h=E5844F6701CEB6C1D870AF6791714835D48A113C3350CB89947BB13E11FF1FD3&directdownload=1&f=9907&d=http://buy-download.norton.com/downloads/OEM/21.1/.../NIS_21.1.0.18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://dw.uptodown.com/dwn/H3IhsTtMcKwZ1j6tt2ZIue0L-xIuqGuszDaGt-lukRMFUASksKoCTzjLPWPK3Ps6U2lq7On6stOrPy_c9u9LSqoywzf_85ZQhQgJVtssLkSh-bteEp1hHEJG6cXkJMZ9/R6l6DVNcKFLyFcILtOvytmOiG3Nmgnl6-irneglur-mr08R_CD-mJQCjArdUxhymgY65PcGll_P76hGvTbrNl0Sa5Dxng8Nvqk64VxGbBV2b6Je9L8FWYzjS2yJYYTUE/4xKzFdlk_ZKCLtn-Fd7oD-0ELebHpEqxNNQ5mx-kbKeH74vMtGUBnAlxlLY_-cqUzoD9viWmgTFE7lg4O9xA0kBJR3JXloEBJt_ISMCqiXhya9Ubn1s8YG7QPm8zZ8kW/.../

http://external.comss.ru/url.php?url=http://buy-download.norton.com/downloads/OEM/21.1/.../NIS_21.1.0.18_SYMTB_TMD_MRFTT_820_10131.exe

http://gsf-cf.softonic.com/ae6/2fc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_en&type=PROGRAM&Expires=1429586136&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UKPFMK8NVk3mC1dmZihC8KaeFo1T7wj8XTPlFgUFADcTSKCRQtzmQbrq1-eviJ5lqbur443eDmf6PhYcd3j9bZhyh1LvBWdWD9X9Oo2kcDAFgaOHnvz07Fzi0m5Ns9ph~ecLwZBZHL77tDDsz3pCNqsmiBR5TzcDPe6e03mrzss_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com/ae6/2fc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_en&type=PROGRAM&Expires=1425630046&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OKiE9QvJrPCYnOqZ2JB2fjQC2KCoQvVvsUifk-zHy~nGK-8O3b435s-uW989JhTRlHgUlsZL3PYhw8pyNrbV2XbPLQCZqaUrGX~LCuMWetPKD8HmWu2yIEfFPvEvB-MiKLuFBdvDUBENeXHhcy479M3irYYzFF4y~25JyBXoBVM_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://global-shared-files-l3.softonic.com/ae6/2fc/.../file?nvb=20131227164949&nva=20131228045049&token=0c7b8d4b33cbecf72e8ce&id_file=9907&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://gsf-cf.softonic.com//ae6/2fc/.../file?id_file=9907&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1410154602&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=a~ghGXtmfxEDEFTz1JZPEoE98bawA7qNAkCsqUOJeyqykXT2XUbxh7DKjyfH~AeLwqnYCayBUQe61Fu~iVeDnB6k4oZZQAgdY3219oJXaYD~GE8Pz5EyjYpuAz30DYoMHmPp1m-TFRO6vkEJwpFsm~WbbwsXuPVr7Mb-90aDwKc_&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://global-shared-files-l3.softonic.com/ae6/2fc/.../file?nvb=20140622081346&nva=20140622201446&token=0b1f71ac9dbe512004924&id_file=9907&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://dw.uptodown.com/dwn/SmbaXWQVNG4DHPC7jxVomRvByDwK0If1bq6JKvp-J2Yjn2KEI0zIyHAf396psRuV0wPNYTYGrnXGeFkdHLNg85GcoUzvOhPMhEMnJKTRvVK9hqcGZRGH3K_TJmvuybo5/sLz6f3LcyuLdsEtw-h9GpSyEBkKnecIepQJUcLlgd8UL7YqGpGhKZDfrsiWfHFAwpzVEIAhyXlr7uuBNp26SdEJ73Iwjy1TlQ9kl8_El15twdtC00fXta-o3dxrfiC8N/BIY7HqkSZz5jkujGQFB3u08VYK2LrXReA_HUwwUbTgsODbE_Rbeml4rff5gs_jZTYDlG5KLWWTFKeFhvTyolXz2hnNa7E_WAjHZFMEdd_UbvgQ3wAdYHiEsUFnHR-sC8/.../

http://buy-download.norton.com/downloads/OEM/21.1/.../NIS_21.1.0.18_SYMTB_TMD_MRFTT_820_10131.exe

http://global-shared-files-l3.softonic.com/ae6/2fc/.../file?nvb=20150112144057&nva=20150113024157&token=0042409efa09255ff36bc&SD_used=0&channel=WEB&fdh=no&id_file=9907&instance=softonic_en&type=PROGRAM&filename=NIS_21-1-0-18_SYMTB_TMD_MRFTT_820_10131-SOFTONIC.exe

http://dl.cdn.chip.eu/downloads/.../NIS_21.1.0.18_820_10131.exe

http://download.chip.eu/.../redirect.php?container=181239019&customer=chip&key=dc304f7f70cf6474873db34da05a1378

http://www.tr.downloads-hub.com/download/.../11855

http://link.download-sponsor.de/?pid=dhtechradar&from=DSdirectdownload&t=!HEX!687474703a2f2f7777772e74722e646f776e6c6f6164732d6875622e636f6d2f646f776e6c6f61642f66696c652f3131383535

https://secure.download-sponsor.de/?lastchange=1391727600&pid=dhtechradar&cid=11855&camps=&campsel=&euid=f700c6897dc710c24a9452c0&utm_source=undefined&utm_medium=undefined&utm_campaign=undefined&source=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.