home

nu.exe

Norton Utilities

Symantec Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from s6475.chomikuj.pl.
Publisher:
Symantec Corporation

Product:
Norton Utilities

Description:
Norton Utilities 14.0

Version:
14.05.0118

MD5:
b1a16aea33864b65f08a2c7875580b3b

SHA-1:
57568255281ac1f9518ba02ebe1f1fa4ba457af3

SHA-256:
f88dfdbc7c6b5a62dcf90ff3a024addd9cc6e852f5f116d703e25e7991f47e79

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
1/15/2025 3:56:18 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.PECompact-1
0.98/18155

Rising Antivirus
Suspicious
23.00.65.14423

File size:
4.2 MB (4,395,520 bytes)

Product version:
14.05.0118

Copyright:
Copyright © 2009 Symantec Corporation. All rights reserved.

Trademarks:
Norton Utilities

Original file name:
nu.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
1/18/2010 2:40:16 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

CTPH (ssdeep):
98304:3r3OXiX85xyjCQL1Yl5V0hSS45CvfcUDtHGW2wtpjIIS:37OXDxyjCLl5OSS45SfJDJGa

Entry address:
0x14A0

Entry point:
B8, B8, C4, 0D, 01, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 4B, FA, D8, 78, 4E, A9, 8D, C3, 08, B7, 23, BE, 02, CD, 81, 10, FC, F4, 02, 93, C2, E5, C7, AB, 3C, F1, CB, 75, 4B, 74, 54, 91, DE, 00, 96, C7, 07, 80, 0F, 0E, 5A, AA, 12, B0, E8, A9, 67, B0, E5, 84, 10, D0, 17, 3B, A8, C7, 92, 63, 51, 78, 30, 20, C2, B8, 13, E6, B3, 18, 13, 66, 75, 98, 30, 1D, 8A, FB, 4E, 85, F6, 17, 75, 1F, 1D, 4A, 25, 10, E2, AC, D8, 31, 51, 43, A8...
 
[+]

Packer / compiler:
PECompact v2

Code size:
8.5 MB (8,921,088 bytes)

The file nu.exe has been discovered within the following program.

Norton Utilities  by Symantec Corporation
Publisher's description - “Norton Utilities fixes common problems, frees up memory, speeds startup time, and boosts program and overall system speed to help keep your PC running fast and error-free. Fixes common PC problems and helps keep your computer running fast and trouble-free.”
us.norton.com/norton-utilities
18% remove it
 
Powered by Should I Remove It?

The file nu.exe has been seen being distributed by the following URL.

http://s6475.chomikuj.pl/File.aspx?e=WIT1l0P7JD0aMUtmewETFTzy1B4M0q11OlewiL-pd9Ky0Nksm21NBPrO3r30pO0r-YC_5XDPb98xkYf4NV9YJ8HzeETJCwbidE5-kCcwTXvqlHPXa03wicEYZbc_rVVQNEnqYcXzSlIwM5sk1Vt9I58F7iaRMSsWfy25-EXhidpQWrmxt4Wc01Sv1M8Id0YefIH8vMajZ3BXOrCFP4FIRC6OmgShmON3w7RbBwhOPwM3b4sN2zGbG4eRwg7MdVofBpyJRb46L3ArvByIAVesr7j0tf-f5kSt5nurCmSq-SZq8EQyHQFU80-3ybMMPK20IjEhFfnrEhkC-XbHOEThINc4aWwPbPYD2TtoRRQHIzMAn-q_049OLMQCK-k1likl&pv=2

Scan nu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.