dvdfabvirtualdrive1511.exe

DVDFab Virtual Drive

Fengtao Software Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Fengtao Software Inc.   (signed by Fengtao Software Inc.)

Product:
DVDFab Virtual Drive

Description:
DVDFab Virtual Drive Setup

MD5:
0dffed2cdfbeff0baaceaab1df9e93cc

SHA-1:
741a46b8d0a9df810310a4b2f9f8e94f3825030a

SHA-256:
956e7163da398faf99f95edfb50978312b53f4950f4a066eb0eb7896cf3aa518

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 6:07:56 AM UTC  (today)

File size:
807.7 KB (827,120 bytes)

Product version:
1.5.1.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\dvdfabvirtualdrive1511.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/31/2012 6:20:36 AM

Valid to:
8/1/2015 6:20:36 AM

Subject:
CN=Fengtao Software Inc., O=Fengtao Software Inc., L=Beijing, S=Beijing, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216DD6CF9EDC284A1D55A2581FF851EA00

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:mQif2KDR1Qs4Mcv33Xx22RvrNkncs1yF0Fv2y2XZl:m9OoR1mvnh3RvZknP2X3

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file dvdfabvirtualdrive1511.exe has been discovered within the following program.

ISO Creator 1.0  by Bunny-Wabbit
About 3% of users remove it
 
Powered by Should I Remove It?

The file dvdfabvirtualdrive1511.exe has been seen being distributed by the following 22 URLs.

http://filehippo.com/download/file/.../

http://filehippo.com/fr/download/file/.../

http://gsf-cf.softonic.com/741/a46/.../DVDFabVirtualDrive1511.exe

http://123.briian.com/forum.php?mod=attachment&aid=Njg3NXw5ZGY3MTc2OXwxNDU1NTEyMDkwfDB8MTcy

http://alert.scansafe.net/alert/process?a=-3-Umr2Ur8BN1hH6LEGCS1PqearPM5Mkjw5HJ5s5ISteqCFrJpBGd7R46jeH_9W5PqOkY_M5gwDZtJiKjHBoH2tQg&b=kgrUxTkkDxXjPrMWeN4zMzIi-u79YOsgwJjSeftMH6fM7_wCSRAIN5ynjQTtj4BrClGD2crZ3bVMS5JKPRJWR99zgcjF_X58v7_cAQH9LQFVBCU0yz9OZ5QM5ehDtZHubB6B60uryUllHUlIeRzEGq-dlDAZpvo_FFAlTXxUrghBHcbFvEANW8XBnHsr6gZZSGXhUZ-3Qn5SKoRxV3Zpcdf9FWnydNYVTTOd6uBmFefjJe0ff_n7r1hAhKnr5fSym4y9z41Swfi-W8-0JaWIhnFYtowg5753WAIxWhXUuDgi1XjUgnbJyYAMj-pJ1d78meBtCtzHZQ1gej4HGyUAprilIGgLT7MAp5QXIdDoVZZ6Lpk4FSLZT9E_s_ug5DXdP9_g3fZYbRcEvi-6_IJFaDOpC65gE3bRRqjq_3to52uJrLA57fXSTZyGVgKlIb7dBAxkYqPP5d-BBGZON5KD_T-A9Kgeu1Lid8DbInG9AGlv1zb5r4uPC-4-Q2B-BEZ0&blockedUrl=http://174.142.97.101/.../DVDFabVirtualDrive1511.exe&X-SS-WNB=8B38E3D9C1611EE014ADA24F479B67DD

http://www.videohelp.com/.../DVDFabVirtualDrive1511_avangate-675.exe

https://secure.giga-downloads.de/dl/.../

http://174.142.97.101/.../DVDFabVirtualDrive1511.exe

Scan dvdfabvirtualdrive1511.exe - Powered by Reason Core Security