home

CorelPP.EXE

Corel PHOTO-PAINT

Corel Corporation

Publisher:
Corel Corporation  (signed and verified)

Product:
Corel PHOTO-PAINT(R)

Version:
14.0.0.567

MD5:
1a8ccd83fec13e43aa915fe66c650538

SHA-1:
a3424a6c0f591209cd89283beb87de41a870e3d2

SHA-256:
d1db170c1c997e0e458d8fd13a59c442bcfc4f0496b934516f3f341bb23d900c

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/24/2024 11:01:09 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Sality
160917-0

File size:
389.3 KB (398,624 bytes)

Product version:
14.0.0.567

Copyright:
Copyright(c) 2007 Corel Corporation

Trademarks:
Corel PHOTO-PAINT(R)

Original file name:
CorelPP.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\corel\coreldraw graphics suite x4\programs\corelpp.exe

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/25/2007 7:00:00 AM

Valid to:
7/1/2008 6:59:59 AM

Subject:
CN=Corel Corporation, OU=Common Engineering Services, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
20AE5F215BD46A3771DADC1D9B65FE2A

File PE Metadata
Compilation timestamp:
1/12/2008 9:59:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x6830

Entry point:
E8, 58, 05, 00, 00, E9, 36, FD, FF, FF, FF, 25, 94, 83, 40, 00, FF, 25, 98, 83, 40, 00, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, 68, 16, 65, 40, 00, 68, F8, C3, 40, 00, E8, BD, 05, 00, 00, 83, C4, 18, C3, 6A, 14, 68, 50, A3, 40, 00, E8, 93, 04, 00, 00, FF, 35, 30, CA, 40, 00, 8B, 35, 74, 83, 40, 00, FF, D6, 59, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75, 08, FF, 15, 78, 83, 40, 00, 59, EB, 67, 6A, 08, E8, 95, 05, 00, 00, 59, 83, 65, FC, 00, FF, 35, 30, CA, 40, 00, FF, D6, 89, 45, E4, FF...
 
[+]

Entropy:
4.9901

Code size:
28 KB (28,672 bytes)

Automation Object
CLSID:
{CBBB0005-CDEF-44AF-B4C7-87741A6D561F}

CLSID name:
CorelPHOTOPAINT.Application.14


Scan CorelPP.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.