home

cyberlink_powerdvd_downloader.exe

CLDownloader

CyberLink Corp.

Publisher:
CyberLink  (signed by CyberLink Corp.)

Product:
CLDownloader

Description:
CyberLink Downloader

Version:
2.9.1.3702

MD5:
b82c524c74064a6a3ee1db6fad5016f5

SHA-1:
21964069ab3435b21409a639611e1ef911211873

SHA-256:
37952c38b5699405005d64ea7f7a2d5b49c5ec46aed96f6162bd323ce9ad7c52

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 9:02:57 AM UTC  (today)

File size:
957 KB (979,928 bytes)

Product version:
2.9.1.3702

Copyright:
Copyright (C) CyberLink Corporation. All rights reserved

Original file name:
CLDownloader.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\cyberlink_powerdvd_downloader.exe

Digital Signature
Signed by:
CyberLink Corp.

Authority:
VeriSign, Inc.

Valid from:
11/16/2012 8:00:00 AM

Valid to:
4/13/2015 7:59:59 AM

Subject:
CN=CyberLink Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CyberLink Corp., L=New Taipei City, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
799AC3976095546D05DE5395166BFF83

File PE Metadata
Compilation timestamp:
1/2/2013 4:35:36 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:4PSDovOfl4/AMOaVZBMTrutYXw6trz+KOx6rjKEYL6:mvOfUjdESYXRBz+xqjKt6

Entry address:
0x72722

Entry point:
E8, 04, AC, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, 60, 28, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 7B, EA, FF, FF, 83, C4, 14, 83, C8, FF, EB, 4E, 8B, 45, 08, 3B, C3, 74, DC, 56, FF, 75, 14, 89, 45, E8, FF, 75, 10, 89, 45, E0, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, E4, FF, FF, FF, 7F, C7, 45, EC, 42, 00, 00, 00, E8, BA, 99, 00, 00, 83, C4, 10, FF, 4D, E4, 8B, F0, 78, 07, 8B, 45, E0, 88, 18, EB, 0C, 8D, 45, E0, 50, 53, E8, 48, 29, 00, 00, 59, 59...
 
[+]

Entropy:
6.9672

Code size:
544 KB (557,056 bytes)

The file cyberlink_powerdvd_downloader.exe has been seen being distributed by the following 10 URLs.

http://www.downloaddoo.com/Download.aspx?ProgramId=4342&Seq=1

http://www.downloaddoo.com/ProgramId-4342-Seq-1-type-download-ReturnUrl.aspx

https://ltoq3g.dm2301.livefilestore.com/.../CyberLink_PowerDVD_Downloader.exe

https://secure.avangate.com/affiliate.php?ACCOUNT=CYBERLNK&AFFILIATE=1352&PATH=http://update.cyberlink.com/ftpdload/Patch/PowerDVD/DVD121220-03/Downloader/.../CyberLink_PowerDVD_Downloader.exe

http://www.jetelecharge.com/tel.php?id=77

http://update.cyberlink.com/ftpdload/Patch/PowerDVD/DVD121220-03/Downloader/.../CyberLink_PowerDVD_Downloader.exe

http://www.emjcd.com/at122vpyxH/pw0/EDJIGKFD/FDKILKH/D/wzu6n5rCHLDFDCEGJLKJIGLJHHDCry/DooGKorMFFrLEErGLEFEELDGKGDqGIrG?h=zEB5=1DD9%NU%MZ%MZE9xuDy.wIvyB5274.w86%MZzD9x58ux%MZjuDw1%MZj8GyBXpX%MZXpXLMLMMK-KN%MZX8G758uxyB%MZnlLNKNML-KNT%MZWIvyBf274_j8GyBXpX_X8G758uxyB.yHy<w38!72AT-0G0HzE0-9R7N-TGw2ICI<1DD9://GGG.3x8A8wI.w86:SK/w52w4-MKRPSRO-LKQPNRMK<<a<1DD9://GGG.KL7yD.w86/Dy5yw1uB0yB/G27x8GC/gE5D26yx2u/5ywDyEBC_F2xy8_xFx/.../LSQPK.1D65<nn>FL|bJUDu6L8xqZKtmKKiXUIgWKHgJsOhJsLgJ0MhXkGfqpCUn8HOVk0UqpC

http://www.apmebf.com/ib103nmvuC/mty/BAGFDHCA/CAHFIHE/A/A/A?c=l52w=s440%EL%DQ%DQ50ol4p.n9mp2wtyv.nzx%DQq40owzlo%DQal4ns%DQaz7p2OgO%DQOgOCDCDDB-BE%DQOz7ywzlop2%DQecCEBEDC-BEK%DQN9mp2Wtyv_az7p2OgO_Oz7ywzlop2.p8p<<s440://777.uoz1zn9.nzx:JB/nwtnv-DBIGJIF-CBHGEIDB<<R<s440://777.BCyp4.nzx/4pwpnsl2rp2/7tyoz73/X5w4txpotl/wpn4p523_6topz_o6o/.../CJHGB.s4xw<

http://www.jdoqocy.com/click-2075874-10653720?url=http://update.cyberlink.com/ftpdload/Patch/PowerDVD/DVD121220-03/Downloader/.../CyberLink_PowerDVD_Downloader.exe

http://software-files-a.cnet.com/s/software/13/05/91/.../CyberLink_PowerDVD_Downloader.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.