home

cdpf15.1.exe

PerkinElmer, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from sitelicense.cambridgesoft.com and multiple other hosts.
Publisher:
PerkinElmer, Inc.  (signed and verified)

MD5:
16e629a07746ec8d8a2b1cc5d2349cb3

SHA-1:
942c366df27da41644115d77e00fc2b35f89b8c5

SHA-256:
84cc32ab042be0bcbea1a16b5004aaf91d91964ecfc2d9d6fb96f3d833b984ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 8:16:20 PM UTC  (today)

File size:
326 MB (341,822,128 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cdpf15.1.exe

Digital Signature
Signed by:
PerkinElmer, Inc.

Authority:
GlobalSign nv-sa

Valid from:
4/16/2014 7:24:02 PM

Valid to:
7/16/2017 7:24:02 PM

Subject:
E=certificates@perkinelmer.com, CN="PerkinElmer, Inc.", O="PerkinElmer, Inc.", L=Waltham, S=Massachusetts, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121ACDA7526DB641562127130B51F384E6D

File PE Metadata
Compilation timestamp:
8/16/2006 3:57:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:79jBlG01wtMTnWrEMliljd3ZDg8t9LFjEykuyIinJIsVaOpH6leEV5LoPe2DK:hdlj1GMLfuiJ1ZDHNnkuyIiJh/pH2L2o

Entry address:
0x11F3F

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 49, 41, 00, 68, A4, 20, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, EC, 40, 41, 00, 59, 83, 0D, 9C, 8A, 41, 00, FF, 83, 0D, A0, 8A, 41, 00, FF, FF, 15, F0, 40, 41, 00, 8B, 0D, 94, 8A, 41, 00, 89, 08, FF, 15, F4, 40, 41, 00, 8B, 0D, 90, 8A, 41, 00, 89, 08, A1, F8, 40, 41, 00, 8B, 00, A3, 98, 8A, 41, 00, E8, 20, 01, 00, 00, 39, 1D, 40, 86, 41, 00, 75, 0C, 68, F6, FA, 40, 00, FF, 15, FC, 40...
 
[+]

Entropy:
8.0000

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
74.5 KB (76,288 bytes)

The file cdpf15.1.exe has been seen being distributed by the following 21 URLs.

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3350844&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=2900897&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3235521&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3310131&serviceid=40&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3306249&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3297078&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://chem.wayne.edu/.../cdpf15.1.exe

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3204262&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3308708&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3128093&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3271695&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3248449&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3294134&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3321286&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3269404&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3122417&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3319715&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3316988&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://sitelicense.cambridgesoft.com/.../download_url.cfm?uid=3250476&serviceid=43&ItemID=6655&ItemDownloadLinkID=12520

http://efulfillment.cambridgesoft.com/efulfillment/.../Download.aspx?ItemNumber=INF01026&ItemDownloadLink=12515

http://efulfillment.cambridgesoft.com/efulfillment/.../Download.aspx?ItemNumber=INF01031&ItemDownloadLink=12519

Scan cdpf15.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.