home

cyberlink_powerdvd_downloader.exe

CLDownloader

CyberLink Corp.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
Publisher:
CyberLink  (signed by CyberLink Corp.)

Product:
CLDownloader

Description:
CyberLink Downloader

Version:
2.9.1.7801

MD5:
f5851eb161e825299d8dfd1c11034144

SHA-1:
60d8baaa4f08029b724a4954c2dee18a3e588101

SHA-256:
67a7e7b2be84f8948656ff6cb5483ad355ba94e5e93a229162b8b65c20ff8fa9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:25:45 PM UTC  (today)

File size:
1 MB (1,089,304 bytes)

Product version:
2.9.1.7801

Copyright:
Copyright (C) CyberLink Corporation. All rights reserved

Original file name:
CLDownloader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\cyberlink_powerdvd_downloader.exe

Digital Signature
Signed by:
CyberLink Corp.

Authority:
Symantec Corporation

Valid from:
3/5/2015 1:00:00 AM

Valid to:
5/4/2018 1:59:59 AM

Subject:
CN=CyberLink Corp., O=CyberLink Corp., L=New Taipei City, S=Taiwan, C=TW

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2CD2C5777BFC596CE3F6EBFDFB9B9469

File PE Metadata
Compilation timestamp:
6/1/2016 5:15:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:CK7JALi1Mp3MNUa8YkaFss9XEljOscROcNcoj4coCWHb0YL2vw:CJiI3MOq8O7MWcoUcoDhr

Entry address:
0x7F181

Entry point:
E8, E8, B5, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 10, 75, 20, E8, EA, 27, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 3C, E2, FF, FF, 83, C4, 14, 83, C8, FF, E9, A1, 00, 00, 00, 8B, 45, 0C, 3B, C3, 56, 8B, 75, 08, 74, 21, 3B, F3, 75, 1D, E8, BB, 27, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 0D, E2, FF, FF, 83, C4, 14, 83, C8, FF, EB, 74, 3D, FF, FF, FF, 3F, C7, 45, EC, 42, 00, 00, 00, 89, 75, E8, 89, 75, E0, 76, 09, C7, 45, E4, FF, FF, FF, 7F, EB...
 
[+]

Code size:
596 KB (610,304 bytes)

The file cyberlink_powerdvd_downloader.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/Gm6yaGk38AtxTyK5lsSYP1T0nmigsDspupWLBK4KRM9FevfXvUHU3hYkVOmlodxcQmhDQNS_A_OBL2keD5FvnvPPutB2DNlVJedIbC2zL92f8dWymVxiMnAXPw9yMtxrOlyDTOmwrlQlf_eH1D EoPZBeUjVg8vNKn_EWWcqUGlm0rYy 71dawp_JQW4rtwKqt4nKi2Efr3AYHa3yDnMwYHutrurow==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://i_mp3-es_powerdvd-16-0-1907-60.forquetarefi.com/crawled_soft/2/6/.../26901-689419-powerdvd.exe

http://indir.gezginler.net/i/2820/.../

http://dw.uptodown.com/dwn/kDTi7mnGjsu2OKZD0v_k64QKEfIUe5mHsC7QmkIlZzerXt7WcbAOxtR62SS3k6EixUAOCT-2Oe8OAEXpHF9xyYAJWpOffhVyV-0eG71A2XQn9Vzc5jD6QyEO1hBN9NEJ/X7spoxwjgGtQvwVqFFSFkLQLaxSCWKxAqox1uDIJxCbiF2XyvHz4kf3AOWPY2thJq_a0EqlOER7FN9tkEIfBT6Vs-UkaLwiCENDq3aeti2pgLajN8q0sRuivyA7UmHsx/IAMaG_51gDIel_e8fHPmavysBzhUKRUoEgFEZfZsXkVbXOjnWbUtZan3G2zQmrVfjvmbdJnBCnNeQIr4Vgmwfe5AIWHcEnvc8O5QRGXH8J-xfxcN0isn7JyYlNwJqXr-/.../

http://cyberlink-powerdvd.software.informer.com/.../

https://dw.uptodown.com/dwn/d3mWV_6AfAc7jqKb6JvkpTHyqSH43AUsemUt_PgsJbiUHRFu7yvuPO2ALdUIz39SwQQYwYqdRg9edgmMoTUeERIORMYi2eL701zuSEywF4ElHSfQCLsHb3s8vvgBOEj_/iLHq5fg8w_G_kuz3POv_o1tQeSWz2tx6gQYNKmKCUNIBrROoq14jX6K3ftjvRkj2Suj6MnzvEi04atuRkKtHB8UY7LmqNJUSmQ0NcUyZgNWHBEEIq03wZcx7wZvBAYY2/E-URM3xMNU-cZtwkTawuxMwhQBIHNrfyBHycGcahQnv9KmkZKS7I7aH5KA2HhjJ4erqdpjyeXDdhkk1ujf4CrOXFwyFCIF_Nx57uCgjg8buiUy5oA78t1LURux4T1h7J/.../

http://i_mp3-es_powerdvd-16-0-1907-60.fopjutrirelad.com/crawled_soft/2/6/.../26901-689419-powerdvd.exe

http://www.towerbitscenter.com/h5MqqpJF8KEkoNE1OlXx38ha_ZPfrfB5xJthNZr9xpR6GUU tBHTUR3GjZDxmgorsL_zGPc7Rt79b qUOY8wmVSekK2G99u9_tH3dRdVJgawZBS3BObpPjHhq2YHtOPCO3wrpH5_Yc0rKi1hi5oGlpvxtSD4XVw xTPCFy3yh3E9ZVP854o5B2Ep5RrNqesrLYPesm2lJRNp2J1f1oigXBwnHW0JQVURnGqhMtbFZHmKE6yPr68=-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://baixar.freedownloadmanager.org/Windows-PC/.../GRATUITO-16.0.1510.60.html?ac5a290

http://indir.gezginler.net/i/2820/.../

http://dw.uptodown.com/dwn/RVR29JSoKls3lOrqXMu3W8zXmR4halLaToLSAhGrYX69Yl76Cf0Yh6CJX3K0WDhBlzbDJTosTAax93mKxwJS2X1OzlBzqvK8JR5IHBnLzkmTrXi3ZIy-EDGD4okTwUHF/NfYaq2Q9L4MbhTOffPYF_Zm5nNon_mrQKoAOCvuNGOkP9LY9uQ6gWQP7sXbGZTkCalwdZjCVU1TSVCm5DhiHOblYVJDhGiohWStzbnflvpd4-TmYh2LkbLU2DCAYzTyi/uXhV6AWAkVgHL2eK6Jf2Mk7QSQBRrtYiD-ZxiU3edLvLM_YbKChJQFlSlDAmStbaCgmmHD2lW750aNMKPG7Yv3o9VjCls-ztuVpAjuI7fXHr3sslhEgPLB0uveEgqDPs/.../

http://dw.uptodown.com/dwn/PymS3s98bCXHgDRRM5blR0MxsysCO5jt14obD_4w1EJanFdl4FdaPLaU3ezqovojiUDfshaapGUyW9DIM5CkUtcNIVf9sIXGyp-IgNDlLY7-2lfCPCEDkYVMyAnHHtzA/p2jhTUqGmq6eULagP5Jq5WN1zPoT_pwA5galIOM9Fd0mqTw4gdoBAKXLyGsHJqnnI5A8r0wK83rD_Dd-1X_xDmzV46Jv-63kvN00qdEF7XVw-p_L1s7IAWweIeDBhsed/zLixdNdZV5n7hW0OsINLF27Gi2UP1hp3tFE45BzAWPeJSWgO6YJ5lM87KpduHBLKrJOQF7qtXhYkhH3bO5bT1s672OePM8ectFijUDxwqtDEA3h82IjvyDBClBHFib7X/.../

http://update.cyberlink.com/Retail/PowerDVD/DL/.../CyberLink_PowerDVD_Downloader.exe

http://www.ranchsendgift.com/f1dZxMgf4Iezl92zbS8oVgnvMm_aP_3uAPi4uwuLWugb2ck2 w64EcUZinTe9SzCqdhgdGEwMfPXS7GrREjSO_rB8jiAFLV7Jfe7kM1wUMM0vgC8TNEXe0SsPQtrlkt9SwZzDBhCFFT_dmEMpJp459zapxlTroibMY_TdOTv9MNIJlU5MtnppjuBlNcL1kNxw2BcOLP_WRQgQDBNClLhRVRJ49rdOQ==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://ftp-stahuj.centrum.cz/dl/08a007ac19beda98020d22884220f716/58696a2d/stahuj/download/software/secured/p/powerdvdxp/.../CyberLink_PowerDVD_Downloader.exe

http://dl1.filehippo.com/.../CyberLink_PowerDVD_Downloader.exe

http://dw.uptodown.com/dwn/jbqmMuoa7htzZZuCcgblYxAqVST798AyG4D9YJgXqUxCMOJXzKmdnnGh7zgzvnipfx1BS0Yzs4_Mo9xunCHOLRX-nWvDsJAP7R7B9ybg6aK_uu3VSG9wtZDEbuFCfywm/3Y-Os2PXUd4BZ_E28zj5bb5opbtcmUVdj7er2XnJejhIMmKhUDmqm6LxxpjJYAxpRCWgxwCRW6oT5RYWJTBOeIwKT06zvM1gmwd8r59KfAxJKN4BQhzfrR_JSNfqsUCZ/n2aCok24jpszxTNvYduo2yx3ruz_5xkkxJu5-pvgnEnfgVZsBGlSZKYYimnvF8EOFwuVgitAGjoPmWehcK1bF3LOrrcwU4pqn3kwQXP9EUkDkF-0HQvn7J_VNg9hG3at/.../

http://www.ranchsendgift.com/WrISmF6Hwr0 CilnMJ4H NtFSeDQ7FZdeVqzBQBC9w7j3bxVnqp2jhMsx2dJY9FjPrLXErj3aZY1Po1xgx_LiLzP EHws4wJ8TGym7NOXlPiy_Z91d37iCw186yb7axmm2ufvW9kg gqYQs8o8BBVUrcxU1e4QodDoMuD4dpL0x5fiWzzZN6RHuiOl754zRTus4s_7 AjYh_CRGjWFMtT9XSa2Bdsg==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://www.towerbitscenter.com/iWklml_kgtrFDLyFUstvwqceyh Ib0bRq6oL0TZdX2oAR2x94IqwUpQgn815EahW_4_z4WBd7JiSINHNGVEYPnJs V_vzEqfBu5CaCrw5ecqHuDbdt4oBin02NibQhRMAN_EmUQk8 D4Jpn j_c_egvqU 3W0VPoi5_Yfm0a6x41t8dQojJ v7RJrFD9nStbfS2s_pkuLkrAP9x9hi9pxBfgLt9c9kOhyQTdN5T57JURbF3oPa0=-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://www.towerbitscenter.com/mYUUsNjTXLyqw75T_rorchayvLkURg_5d3L2dMtvKgbEIW1z4K5iAhXSJErAP5ZJqLFB8MgVjmPZGs_MzuQxajG MzX7MMIFl28CPG5KugzLjQ 8vfggIFwVGP2i6DrC7tE wRuIuWCzufLhQj5dU0lPN BqPhuEhe9G2B0ui3J3XvnEfMT7BE1M48uBEJJQmdgLtMAEcNPna0c90OE_iIRtuBPtKWI49k2lnFQTaWV5VTIvBSo=-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://www.ranchsendgift.com/WztHlGAXUOBMGfUAYq3hpJot6npSWdtWjBlMiAPIoyBc0y9MYy1BGbK8ZAagb7ziTahNI2BdKvSSmg2M BE5Wekx4WIteg12YvkJkSX PEamf4pXRGGe6 gfZYdVrD8WZQQVsJ2xSiTgpnFVfDcAKblK5bk24gAhUndOvNkO37qlPVNBT6wSHQsSzI6vjvYAB8PkC6taoaBWkMcgqGbknioAsI4KAQ==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://www.ranchsendgift.com/MIvSXf7 UDkScfgeWo5Sktdl091quoaWn8v84NwnardsThkbJUcNWZ4D9kO5GvAjuiOYYYLcRRMXFP3Rh_Ioa7jvoou 8e D6kLLwXNsLWSpNtQab20NkE K77c7ZVRs2wAf5zHAoyETfnMaOdV1mdHl8xHjeJ39WjjVWN1FCQ6b0I4TY9yCB8KofKTAEL4Wn3AEpNRvd42BF_Pz Dem9n40DJNcfw==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://dw.uptodown.com/dwn/zK7tc9ulhJ6jEBvlxdT0g3TmQHkBA5pfsDVgwkzkiiqFzNS6vEDjeTezWZM79zf67uwFex24FIhv2kylOrz1vQHRY2pWVPQvPu9gEmk9AWqaq9XvVEyQw3m-dKPNubaX/vPd_B2UKSixuyOYYmSXZUZoAJRFQ5B164s7xk1vcr98wwmVtpSAKicuxMCs0F9AM4O6fcqX0peLfE__VHWFUtW_PYfCia6Ev6G7jvSkU-oJ06DD8QRG_G4lY9WrPqtOW/6ajl4KDu5SfXAE_Tryp1hUIj7exII6A4cBGTlGOZQDnkcAP8lO5spPHnOCqjP1SWltEJlUByCM-YMnDPRI7DmmmDhtCMhhQeDK6J8exA5nPg9MneIMfmmOUdI7ZVKndm/.../

http://www.ranchsendgift.com/51ENuqFxeb2 8lieFcg8lm4_RUb 0UrThNDLJcB_XIjvHmVjFEhpnMyDrdhG51ualW2EomMmUfys3dP0EDczOq VAvBR7qbB1ard2uMMYndH4OHsv4pbPLlxiD8A7sRu7a9Yk_eatlvIu3MpfxnQW8D5Ao7LJ8kFGSjQ0eP65CMxHWG P0Uba9JHXs 1fYrJufc9R03bQadeSjaJ sUuUt vnyViwA==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

http://i_mp3-es_powerdvd-16-0-1907-60.fiblotaredut.com/crawled_soft/2/6/.../26901-689419-powerdvd.exe

http://i_mp3-es_powerdvd-16-0-1907-60.fargutareflo.com/crawled_soft/2/6/.../26901-689419-powerdvd.exe

https://membership.cyberlink.com/prog/support/.../download.do

https://dw.uptodown.com/dwn/PZsLl_KQc9txrcabFQMeDA5jihocCK99-PpggcozNptjIiRMFWdJnb9wGObDZkm88z8vuR0qNEIkpPGaJ_Sn5eqK71fBczbKrsn8CHNvaz-KncXQqNGF6dauBGSzg_qY/o_OghI2UHJCCDSmdZQikAbnSJDpJLPz0DRwrwEZjJRcSaM3Zwx4yvdwB0McnLZ25tDrEJyRk3yiuPoxCR53y14Dd-dVuc9Ys06tXgxMEvMaP_WmGkBTigtaVLfN2W3QK/RmcxizpkzW3LSW_WtRDDhjqfbXg6T-NGMAZY7cQSTco_eMZBtkAh6ZWluFI5jdwj44QtaWxV35eAjbGjlxhZX8Ik29gtSqXa4LP_npNIv3iPuaB08UTJ2aHYk_vPHF2y/.../

http://gsf-cf.softonic.com/6c0/b81/.../CyberLink_PowerDVD_Downloader.exe

http://www.ranchsendgift.com/RY sj4H602pQ3IZmKe6hvBLm4KwJmLMGV Z13gPOD1vmGmotzzfGex_5Tssu6vmhGe3fBVga5dq5gnjEIivuWt2XpVcJQbuRB7X BlrDanTBgSGeoO3b7DklPKGsX8byRwZ4LoLC7S5kqAFsv2zQXf7R6 1G5kuJUlNi 8ZMvjTWn40enm827lsYBK5nURZagJ4GTP5BeTEeTXlKLdy_DiXC0PO_rA==-G1wAAMTP28fEHYF1FyUz1bAXjAkm_O8YB z3usE1AA22x9g5ojB8WmPCQ4 _4 55VqZOeG1uOub2SRGSSDkZx569YusoKODBlebaVeBqfAA=

Latest 30 of 87 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.