home

dvdsmith-movie-backup.exe

DVDSmith Movie Backup

dvdsmith.com

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
dvdsmith.com

Product:
DVDSmith Movie Backup

Description:
DVDSmith Movie Backup Setup

Version:
1.0.5

MD5:
25983a47fade6438397a518ca5645862

SHA-1:
d31c8c03a611495a06ffa6716ec376b218af23eb

SHA-256:
bafa3bccadeaec90c7118d1b8d8b49c16017183136b135166b4fea8f79efa481

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 5:01:51 PM UTC  (today)

File size:
2.8 MB (2,885,285 bytes)

Product version:
1.0.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:72TGYjZOEVgaTVmLgxF7E18z3RzFvJltyL7Gai56R0YxT:SC6Z1Vga4ypz3P5ws569

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9759

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file dvdsmith-movie-backup.exe has been seen being distributed by the following 8 URLs.

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_en&type=PROGRAM&Expires=1480958578&Signature=OS-L4NRQND4j1H~mZi~DZr551blYmV~zce2opSci01Sf7NXKB0gh2Sgo9J1-uz2OPi~2L7xv257oQv9L0NJzEV7aZI5nRncylVK5D3K0AM3b7L9fL3PBP~M6DoQIYxa3W-72yN04NQ1UiZyckCqd74RxaZ-yRu9gCBFPn4ZG5OY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_en&type=PROGRAM&Expires=1483773565&Signature=ErfwOvxoWnUeahiuT1c69AizZ4II6oe8D-mtN8NErc3Q3lGlnskrCtb8fnAi~UP6jKiFx9WTrEgGdwqouDxxtAUzcRLFS5d0zLPv8aeAi5ELvlt9wc-CIT3btnZ4yNN8SK8JxpAeyyWO0wM93pWfATboqhdo6Nqr-c-4ps5hETM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_es&type=PROGRAM&Expires=1479196692&Signature=A4gRNtbhDY0KEQpvOFjK0md33pOI7P71SAlE6l2sw~1IA-9mnBQFwfoNthVHWMg7EbR5dRs6MgEtUN~n6t0K26CTyTIP6JN0lqRnnojq-JUWenyvztXInT38JlHdqGA2hOwHd0-8XsbbxmSdXAcuPM2zDXdYLoaFLteGpgXm2Pw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_en&type=PROGRAM&Expires=1475131433&Signature=eql27eB6P4TQ27HxMQ-X-9hsQ5fvUDcWNIoofzE-d0LL~M8LO2UmSowNIeW6OTIgEBKhJ7AIynOkN~VyKXJyzG6UOe~0FRUuo3FQU~IrFKWRDX6PzLOu5OnRi4UuScKr~IQ3~Bj44a9u1JqB9X01LCQp0Qwu7xXG8uH9xZEXLmI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_es&type=PROGRAM&Expires=1466825255&Signature=D4JIcUUQD3~eKEAlBmgKPzpDBjEmzmOtQ~f73M5F0uaaPLk4bv5V0vblmf322PpR9D1qzTT30e8NZi9TbMm77SG93Y5Ln3FZgTo4TgHs9jJblmDyBCdqMSqJB55obaVNkkdO1SgPRdxW~R8BTgA6Ff0S7S0Y9HK4sbQzBP4CofI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_en&type=PROGRAM&Expires=1460662574&Signature=fm~zoYjcV40fJG796eGzaPBd3ZPsRZMVWlaC9Odm2FoV1Yr~9HwhOd3AUiyzwCB2emyJg-FavsaFkOtyeYvhrVJ19vsvrnhyrwGBydC4y0~D0iS3B3VRAFXXj9tngKlb2cPcxK6EBiL9oQU3hup83YnKgwQDe7y10Q2NGbkPOMw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://gsf-cf.softonic.com/d31/c8c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=73819&instance=softonic_en&type=PROGRAM&Expires=1437592310&Signature=EyRqn6XCJfM7nSod5UrzkmhPdB4pYkZ7YbfbN3B-mbxE0RV1MV660qPFwV2FO0Y~fpsLPP8ehzx3dV99ZhOgKcIw5ffzdaMjhSud~ktDeWpEKAug1cG6GwzZgIQsdYgauBAImCl2t4UadQpkh9JQgvtbvz7Sx-MZBngBBZJRN40_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=dvdsmith-movie-backup.exe

http://www.dvdsmith.com/dvdsmith-movie-backup.exe

Scan dvdsmith-movie-backup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.