home

windvd11_pro_tbyb.exe

InstallShield

Corel Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from www.free-codecs.com and multiple other hosts.
Publisher:
Acresso Software Inc.  (signed by Corel Corporation)

Product:
InstallShield

Description:
Setup.exe

Version:
15.0.498

MD5:
9ba03549a90b0200a7c76ef9c1b0c587

SHA-1:
533ea37f199dc67eaec25d7e538c281a1683053a

SHA-256:
b4cd6a5722d3f77f5bc9af2f2e00efe66de62cd7997dc2882c0e07f5c1d21ed5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:44:14 PM UTC  (today)

File size:
127.5 MB (133,685,336 bytes)

Product version:
15.0

Copyright:
Copyright (C) 2008 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Common path:
C:\users\{user}\downloads\progi\??????????? ? ??????\windvd11_pro_tbyb.exe

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 4:00:00 AM

Valid to:
7/25/2016 3:59:59 AM

Subject:
CN=Corel Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2FB9C9DD5F7C9624F15C832E4D735D1B

File PE Metadata
Compilation timestamp:
5/10/2008 7:39:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:zRjJl0i4RKYM6jSfH5NFkL82T9GbTDg4ixbL6p6P7E9X1g9Oi:z5ZaKn/g8LXg4ixbuSQX9i

Entry address:
0x21EE4

Entry point:
55, 8B, EC, 6A, FF, 68, F0, A2, 44, 00, 68, 60, 49, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, FC, 92, 44, 00, 33, D2, 8A, D4, 89, 15, D0, 8B, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, 8B, 45, 00, C1, E1, 08, 03, CA, 89, 0D, C8, 8B, 45, 00, C1, E8, 10, A3, C4, 8B, 45, 00, 6A, 01, E8, A4, 17, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 98, 14, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
288 KB (294,912 bytes)

The file windvd11_pro_tbyb.exe has been seen being distributed by the following 29 URLs.

http://www.free-codecs.com/download_soft.php?d=e2f15c7b41962a86f38fc1f97413b953&s=291&r=&f=WinDVD_Platinum.htm

http://cdn.portalprogramas-download.com/d/.../WinDVD-Platinum

http://www.tamindir.com/indir/MjAxNS0xMi0wNyAyMTo1MzoyMA==/corel-windvd/windows/.../

http://filehippo.com/download/file/.../

http://corel.com/akdlm/6763/downloads/trials/WinDVD11/Pro/.../WinDVD11_Pro_TBYB.exe

http://www.free-codecs.com/download_soft.php?d=4e9558a421880fcefb19a6894dce6d7a&s=291&r=&f=windvd_platinum.htm

http://www.ranchsendgift.com/b4O2cgJF4__Vta8RUVhfNLqPkKoTJi05B0jM0RjWIQ9YpFN3YL3LwbilZgaQf3FLukxNoGLhBkln9o7RocgC26OB7jrbuRRyC_nuI18C qCNShJbI_SCnRWGTIoeJ0EbkOLQHYNp0vobYCe2qqi3iBV7jqColNAUX3K_R71HZM7J_a84x9KAFsDun7SFbwG_IO4WCZCZ2gaj0ECbaVY8uikHnwGYOw==-G1cAAMRvJz9uXpc6 6XdIDJJMehbLJxyXEYBcFsQH zzg lhY2x86QQG5Y0t37o6SRbKqPPYsEbDPKz2eYh922CJ4O6BlyQpMvOq9hs=

http://www.ranchsendgift.com/bqNDIcGwsKzz0Z9gjsW1nA_DU7JvPXpS9KHKEElamSl15QBtDn5YlU6uPnijpTkjtY_xxS_BZoaTml6LYbjHwvJN50nJgmtbPW3P2NbbjwMR8Ow1BaOLQWw0tId2CRhaPQzIOTPhXbsj5pWnLc LraBd0SGHZwwMH4ot0eZaTsW 09roJX92TpFLgcJzXbyVy 8In8HwZcW09Sevv7D6F6R56 hi8w==-G1cAAMRvJz9uXpc6 6XdIDJJMehbLJxyXEYBcFsQH zzg lhY2x86QQG5Y0t37o6SRbKqPPYsEbDPKz2eYh922CJ4O6BlyQpMvOq9hs=

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

https://windvd.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOVuHlFnKIehtZzr1Y1uOJTS7NxTI8nYfe3zN9drOapjSxOrx8Oy5PeLDQF4ekJ9k2Tqr37 ut5MCGOeg0MXw05Qea6oWqzPcxs/TzNo3jvM4aYm WH1evETZowX7m1oZwiB08AHyHV9wsaM7eEtIjaqsTjUx5p/.../nIw==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../WinDVD11_Pro_TBYB.exe

http://filehippo.com/es/download/file/.../

http://dl2.e-frontier.co.jp/corel-jpn/files/downloads/trials/.../WinDVD11_Pro_TBYB.exe

http://download4.freefiles-15.de/software/s4574/d25326/25/.../WinDVD11_Pro_TBYB.exe

http://filehippo.com/download/file/.../

http://www.sendcurrentfarm.com/c?x=hQVVEq4gSmnid8rEBplr3/ZoCC0y2GdI7Sj7QXrygn0=&c=mtk1axgZhTbnq2b5w tNbScBFpw48cIHbFZ3wye95izJHDQpvq4NLMm3y3TK ngJBB KjX5PxXWrgIeFmMJshvxWD2tygkw6HaOLFbcB45r38VzlvMuWGEjUUKCI9OksOnV4STkv hDdTYSD2DuCSUm1MBm9P1wJNUJsdxec/bs=&e=0&downloadAs=intervideo-windvd-11-pro.exe&fallback_url=http://pf.benjaminstrahs.com/s/1461283521/es/3/.../36427-1797473-intervideo-windvd.exe

http://windvd.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOVuHlFnKIehtZzr1Y1uOJTS7NxTI8nYfe3zN9drOapjSxOrx8Oy5PeLDQF4ekJ9k2Tqr37 ut5MCGOeg0MXw05Qea6oWqzPcxs/TzNo3jvM4aYm WH1evETZowX7m1oZwiB08AHyHV9wsaM7eEtIjaqsTjUx5p/.../nIw==

http://www.programosy.pl/.../pobierz,windvd,2.html

http://windvd.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOVuHlFnKIehtZzr1Y1uOJTS7NxTI8nYfe3zN9drOapjSxOrx8Oy5PeLDQF4ekJ9k2Tqr37 ut5MCGOeg0MXw05Qea6oWqzPcxs/TzNo3jvM4aYm WH1evETZowX7m1oZwiB08AHyHV9wsaM7eEtIjaqsTjUx5p/.../nIw==

http://filehippo.com/download/file/.../

http://intervideo-windvd.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuhxYeCkDCjKOSD69t/1QYcpobUhvwYfBoDHZ9FhlrwC7EkTNFd/.../J0HIAnrIKxNzZvCcCE3yvecbq7OLTNSh78Ysq2jPIJdMB0ZQWTYzV5poc7aXmPivTZSXadnUvS0z A5R8T9yNyi1Lg4RMw==

http://portalprogramas-download.com/d/.../WinDVD-Platinum

temp:WinDVD11_Pro_TBYB.exe

http://dwnld.windvdpro.com/WinDVDPRO11/.../WinDVD11_Pro_TBYB.exe

http://www.corel.com/akdlm/6763/downloads/trials/WinDVD11/Pro/.../WinDVD11_Pro_TBYB.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.