home

dvdfab8005.exe

DVDFab 8

Fengtao Software Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dvdfab-decrypter.en.softonic.com and multiple other hosts.
Publisher:
Fengtao Software Inc.   (signed by Fengtao Software Inc.)

Product:
DVDFab 8

Description:
DVDFab 8 Setup

MD5:
3bffdd7aa7af2b48478b13af73eb4721

SHA-1:
565eb428ef2d1023574366354d3fbae89df53093

SHA-256:
f07f1ce6ea9e92a439835b4971c5594b901d1ee9ca8fdc82ae3ac701379ece00

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:39:51 AM UTC  (today)

File size:
13.4 MB (14,032,648 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\Program Files\dvd shrink\dvdfab8005.exe

Digital Signature
Signed by:
Fengtao Software Inc.

Authority:
GlobalSign nv-sa

Valid from:
8/5/2009 4:38:40 AM

Valid to:
8/5/2012 4:38:40 AM

Subject:
E=service@dvdfab.com, CN=Fengtao Software Inc., O=Fengtao Software Inc., C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000122E89CF68E

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:y9DAiMwb0BW9PErAfeidVMOB0hQQg3iIuAa/YFG7Hy1iFY69IT4DXCnYjYp8:yNxPEUekMO0hPSiptYcDXSEr9Yp8

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file dvdfab8005.exe has been seen being distributed by the following 3 URLs.

http://dvdfab-decrypter.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMCgEMws27M3pmpZSzw2 TfiHswCUwEORx6ty/MaXn6nseORDO/9Yi FoIk2sPfh9VE2zVsf45PvaBJvVlvd9hfrKUZ0UpDkn4svn K9R ShqOu9X3P2Q8g5zvx9F5O0Sx8J1tJ qqn0xqkTOvdywyo50wQs1eyTZ ywyTx0JKEXn UkQ t7D S9g1QjLDYexjeLwMI6pbchpqdOEhEqjdqnl9EICUVAZafVOjfd0uQv2FoCcxwDQXoO8FEuSwON4PkpYV4wsHcP1KgFuMpsFM4h8jNHqb2hVeP630feV75koXsdraqvl1kU8GpZLPyE/UnAvUUJiZ/fvXQSJl5WhReJsjsn4F8zHj7eVB9fXfCgv4Q4lOMOGuk8Q4CWqmG/.../L6PmPZLA5YlqPbjQUD5gzmwdVSyU3RJ a0ErNQIQ==

http://global-shared-files-l3.softonic.com/565/eb4/.../file?nvb=20140608173508&nva=20140609053608&token=02f4c32486bb8e0af349f&id_file=47661&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=yes&SD_used=0&filename=SetupDVDFab-8-0-0-5.exe

http://dvdfab-decrypter.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMCgEMws27M3pmpZSzw2 TfiHswCUwEORx6ty/MaXn6nseORDO/9Yi FoIk2sPfh9VE2zVsf45PvaBJvVlvd9hfrKUZ0UpDkn4svn K9R ShqOu9X3P2Q8g5zvx9F5O0Sx8J1tJ qqn0xqkTOvdywyo50wQs1eyTZ ywyTx0JKEXgz4HvZrODFNfW7wipEC3FbB/wPoD3Dp GQJgeqONf4YVoP c9Ntm2FgceLWLcROkKP1XAIhBrapZlsOFjWk1ILkpYV4wsHcP1KgFuMpsFM4h8jNHqb2hVeP630feV75koXsdraqvl1kU8GpZLPyE/UnAvUUJiZ/fvXQSJl5WhReJsjsn4F8zHj7eVB9fXfCgv4Q4lOMOGuk8Q4CWqmG/.../L6PmPZLA5YlqPbjQUD5gzmwdVSyU3RJ a0ErNQIQ==

Scan dvdfab8005.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.