home

NPE.exe

Norton Power Eraser

Symantec Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from norton-power-eraser.de.softonic.com and multiple other hosts.
Publisher:
Symantec Corporation  (signed and verified)

Product:
Norton Power Eraser

Version:
5.0.0.31

MD5:
77a7519f29e8a4b06fa02f54de9fe556

SHA-1:
f755ef625f64f1cd24a82742781e92fa5ba7ba97

SHA-256:
fcea1a37969deb68591ca3fa257a92e66fc2344197d9f6c5ef18d33b09557a15

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 10:56:23 AM UTC  (today)

File size:
2.9 MB (3,088,296 bytes)

Product version:
5.0

Copyright:
Copyright (c) 1997-2015 Symantec Corporation

Original file name:
NPE.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\npe.exe

Digital Signature
Signed by:
Symantec Corporation

Authority:
VeriSign, Inc.

Valid from:
10/7/2013 5:00:00 PM

Valid to:
1/6/2017 3:59:59 PM

Subject:
CN=Symantec Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Mountain View, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
12DB9E53539B8E248BC77DD2BA611167

File PE Metadata
Compilation timestamp:
6/3/2015 5:40:27 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:UcQZr0ZRV8XXcB/tTQBaxJdAH1Q4H2zBaQa3WvE/Z1exoO:UfR0ZjOMxxQBaY1h2lzaGv4/exoO

Entry address:
0x21432A

Entry point:
B8, 7C, AA, D8, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, D0, 96, FA, BD, A8, 77, 81, CE, 25, 43, DD, 37, E1, E5, 3D, 97, 52, E6, B0, AE, A8, 9E, FA, C5, D7, 17, 85, 0F, DF, F2, 55, 96, 4F, C3, 20, 08, B1, 02, DF, 39, 0C, 78, D9, 42, 00, 3E, CC, D6, B9, CD, 3E, 0C, DB, 2F, 10, 9C, 81, 62, B5, 5D, EB, BE, 70, 95, 70, 9C, 0A, 61, ED, 7E, 34, E9, DE, 77, 5A, 8B, 1C, A1, B7, 2B, 2A, 4B, ED, 1A, 6C, 10, FC, 5B, 8F, CB, 5F, B6, 72...
 
[+]

Entropy:
7.9776

Packer / compiler:
PECompact v2

Code size:
5.8 MB (6,099,968 bytes)

The file NPE.exe has been seen being distributed by the following 22 URLs.

http://norton-power-eraser.de.softonic.com/download-tracker?th=1/.../16MIOzRwqccoV7ljLk1SmWfmXJqq6KOImdTMsT69GLeQskPFzOxQGzH3Lj F9LH0tahkGZy6GFJx1sdDAof1C70IWgUrN8VffTGpc7s=

http://lb.cdn.m6web.fr/d/c/a/197dcdac81d8f7d12df24f6629b50b05/56c9b077/soft/.../norton-power-eraser_5-0-0-31_fr_320766.exe

http://www.tamindir.com/indir/MjAxNi0wNS0xNyAxOTo0ODowOQ==/norton-power-eraser/windows/.../

http://gslink.us/npe

http://www.tamindir.com/indir/MjAxNi0wNC0yOCAwOTo1ODoyMQ==/norton-power-eraser/windows/.../

http://www.nonags.com/.../dfp.asp

http://www.tamindir.com/indir/MjAxNi0wNC0yNyAxNzowNDo0Mg==/norton-power-eraser/windows/.../

http://www.tamindir.com/indir/MjAxNS0xMS0xOSAyMDoxNDowMg==/norton-power-eraser/windows/.../

https://proxy-us.hide.me/.../process.php?action=update

http://dl.cdn.chip.de/downloads/.../NPE.exe

http://norton-power-eraser.en.softonic.com/download-tracker?th=1/.../16MIOzRwqccoV7ljLk1SmWfmXJqq6KOImdTMsT69GLeQskPFzOxQGzH3Lj F9LH0tahkGZy6GFJx1sdDAof1C70IWgUrN8VffTGpc7s=

http://hr.download.hr/go.php?file=w11460&code=m1p4l5t5w1g8j4t0f5t9

http://cdn.portalprogramas-download.com/d/.../norton

http://www.tamindir.com/indir/MjAxNi0wMS0wNiAxNDoxNzo0MA==/norton-power-eraser/windows/.../

http://norton-power-eraser.softonic.com/.../trmsvRChbxdrflJq3ZIylWt0sI8aa3KPl0C9oyM84N0MfBu0Uc p0awMca3IyQxMJj0rbLjJUq7b8mmcCayzEXRgF0UpDH50Zi vNsRCnSiDHI17BkjOyWYzeLAuUMl iplhvwEwspVoiiiSqgBy29s=

http://www.tamindir.com/indir/MjAxNS0xMS0zMCAwMzowODoyNA==/norton-power-eraser/windows/.../

http://www.tamindir.com/indir/MjAxNS0xMS0xNiAxNzoxNzoxNg==/norton-power-eraser/windows/.../

http://software-files-a.cnet.com/s/software/12/74/18/.../NPE.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://liveupdate.symantec.com/upgrade/NPE/.../NPE.exe

http://gslink.us/.../npe

http://liveupdate.symantec.com/upgrade/NPE/.../NPE.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.