home

pinnacle_studio_19_bd_plugin.exe

Corel Corporation

Publisher:
Corel Corporation  (signed and verified)

MD5:
097f8bc44d8a7a2b690005f8fb5f1874

SHA-1:
ef0cf2d40b7f2b37c82bcaebcd39d900727a5728

SHA-256:
7f5c45f71998327b746f2e09969d4ee5317706f5d5f5287a8bd3df851540e8da

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:20:53 PM UTC  (today)

File size:
391.8 KB (401,192 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pinnacle_studio_19_bd_plugin.exe

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 2:00:00 AM

Valid to:
7/25/2016 1:59:59 AM

Subject:
CN=Corel Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2FB9C9DD5F7C9624F15C832E4D735D1B

File PE Metadata
Compilation timestamp:
8/28/2015 7:18:34 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
6144:q7kZOWziE2UagU3tJxvkKzKWy8DiPxGpa7q1xslsF6WFyyyyyyyyNy88xzGzGRri:csOWOEFU3LxvXeztAD7slm5qzGzKi

Entry address:
0x11451

Entry point:
E8, E2, 33, 00, 00, E9, 87, FE, FF, FF, 55, 8B, EC, 83, 7D, 14, 0A, 8B, 45, 08, 75, 0A, 85, C0, 79, 06, 6A, 01, 6A, 0A, EB, 05, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, 50, E8, 02, 00, 00, 00, 5D, C3, 55, 8B, EC, 8B, 4D, 0C, 56, 85, C9, 75, 16, E8, A3, 36, 00, 00, 6A, 16, 5E, 89, 30, E8, 2A, 36, 00, 00, 8B, C6, E9, AF, 00, 00, 00, 83, 7D, 10, 00, 53, 57, 77, 0A, E8, 85, 36, 00, 00, 6A, 16, 5E, EB, 7C, 8B, 55, 18, 33, C0, 85, D2, 0F, 95, C0, C6, 01, 00, 40, 39, 45, 10, 77, 09, E8, 68, 36, 00, 00, 6A, 22...
 
[+]

Entropy:
6.9572

Code size:
131 KB (134,144 bytes)

The file pinnacle_studio_19_bd_plugin.exe has been seen being distributed by the following 4 URLs.

http://wgt.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D3DFFBA255361D24D5C5727BD4B8BFAA69C5413DDEFFD9ACC23194B4A25477B9798D8EDEB4028BA310C6CA884D1BFA851A463FDC381DE15B1B3A7AEE5CAA6E358D9E5851E9D462BCBF0451C577DBEF2976/.../Pinnacle_Studio_19_BD_plugin.exe

http://cdn.pinnaclesys.com/Release/ipp/.../IPP4BD.exe

http://cdn.pinnaclesys.com/SupportFiles/.../Pinnacle_Studio_19_BD_plugin.exe

http://wgtot72.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B9AF21547D4B1089E2ACD4561C2D1C61F85AE4AF627A3969DC0728148F109F682FAF72BD0FD39A0C4FBCCE9FF5F7FE0FF31067B4A6C113DBD78817E98361862C35C301D4CF6797C8A/.../Pinnacle_Studio_19_BD_plugin.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.