home

prime_nero_7_-_impre.exe

MD5:
901e454d653d6fb02e5aad8ef8195975

SHA-1:
b8c90d7277de6838a01d179ba7ff815699e746da

SHA-256:
2a61e6a8bdfcc5e59551c4ce8cfb55ae4ce4709ca69830bbafcde0f78e35f1d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 4:23:52 PM UTC  (today)

File size:
941.2 KB (963,808 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\prime_nero_7_-_impre.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
24576:JKGPeI5MHCHtwysk7A9AIZpulmYmdP1c33SjeP3:3PTKCtZs0A9Al6dP1mSi/

Entropy:
7.1828

The file prime_nero_7_-_impre.exe has been seen being distributed by the following URL.

http://www.tourscyclesoftware.com/c?x= L4OYZrl9iPgQM36sCsCyIAxLCi3pIj3gFv/zkdX97w=&c=dJzI48FgSBBdUlUOf1MaCciohK 2VBTzbB El YJt7ce6TTCFpnGivvxH5KGLwhPTAmlsO24JPZE/y2K0LEeBwKa/k0TEozF7CNfEJpwkUnF76d1WFyg0302f/OMQ MO&downloadAs=Prime_Nero_7_-_Impre.exe&fallback_url=http://.../get.php?file=d3e0662e&m3

Scan prime_nero_7_-_impre.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.