windvd11_pro_tbyb.exe

InstallShield

COREL TW CORP.

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Acresso Software Inc.  (signed by COREL TW CORP.)

Product:
InstallShield

Description:
Setup.exe

Version:
15.0.498

MD5:
87f9795d5f0a8edffa190ad63582f23a

SHA-1:
d97e88c340973bb1c84803ecedfa9781eab98955

SHA-256:
8640d0b8cc636eed2d2ddde3a782a7ff5a3b3e99caca8c0a0d0d39803b575fe7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:39:43 AM UTC  (today)

File size:
118.2 MB (123,908,088 bytes)

Product version:
15.0

Copyright:
Copyright (C) 2008 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\windvd pro 11.0.0.342.521749 + keygen\windvd pro 11.0.0.342.521749\~get your software here\windvd11_pro_tbyb.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
11/13/2010 6:00:00 PM

Valid to:
11/13/2013 5:59:59 PM

Subject:
CN=COREL TW CORP., OU=Digital Media Group, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=COREL TW CORP., L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6099896A7B027918CFDB657C17E6E536

File PE Metadata
Compilation timestamp:
5/9/2008 10:39:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:ubEH492fD6lcsSfiX1FgKeaA19mD7rntziR1Rp1I+otafLHEh:ujGEvVwEDlziHRogoh

Entry address:
0x21EE4

Entry point:
55, 8B, EC, 6A, FF, 68, F0, A2, 44, 00, 68, 60, 49, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, FC, 92, 44, 00, 33, D2, 8A, D4, 89, 15, D0, 8B, 45, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, 8B, 45, 00, C1, E1, 08, 03, CA, 89, 0D, C8, 8B, 45, 00, C1, E8, 10, A3, C4, 8B, 45, 00, 6A, 01, E8, A4, 17, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 98, 14, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9976

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
288 KB (294,912 bytes)

The file windvd11_pro_tbyb.exe has been discovered within the following program.

Maxthon Cloud Browser  by Maxthon International Limited
Publisher's description - “Maxthon Cloud Browser for Windows uses a unique, innovative dual-core design that uses both Webkit and Trident. Fast and efficient, our dual-core design displays all web pages quickly and reliably.”
www.maxthon.com
3% remove it
 
Powered by Should I Remove It?

The file windvd11_pro_tbyb.exe has been seen being distributed by the following 40 URLs.

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1487334916&Signature=Qf7mWR5~PGPrVEgQQ61OG8fgvgRbIdviFZ2iXVuaHqeo3wSBpxsdUmAkcLOh3a6XiGOj5PIL4PT9oUnZfclGp-eXFHiNEPvtu1aUsyKIK4aKHdgFysdJd05IQ6wZJ4vtDPbvbrmBERQBxspfP2VBZwc3lXJNnpc3up9YEWR2nZs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1481713608&Signature=KhZpGzzdzBBuG5M7KFGOoqyw5iqOSsJtywQFVdmxKH96v1Q7Elbxa6ol78gnr079AwG-yTnkTKOJZ9UGHkSCoBCBr3V3~O3zOxmU~D7q6PKhv4zX-r1iKp-M-dmvGpml9Ml5BkYf8gijTyvdhnGk1kD4P5stxcK-PIpYHCxcoe8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35904&instance=softonic_pl&type=PROGRAM&Expires=1477255343&Signature=H8t4rYialnACpjnt3SUgUuzGNlXe6A7mpm7lG8E7lY9lcFWCoOQCKMzKa97h5QeIHhSiaIzMZkY6n3QWDnJ0IhRbyWovT4h2f-uLK1z6zdf5V48IM7cpiM0a2XIH3ir8vMxG9lJDXm3BnN5Qv6xuxQY7aSUHhBneZL8EagGe2X8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1465613201&Signature=e6P~PxZ3bY-uIQoHvKivqRZWOMVYWXNzG8TQ5F-AdjCzjgT8A1S7iJBrvgVG-55zOGcvg3e0DYpc14XGst-mvwEQIPwwdk~vZzbhTSmGM6JMmHy21prG86uwf5P4bgnD-i4aff6q1f8SU-swBIiGSaQZHwwd9YGYMukdsE~qWzg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1473048802&Signature=RL91BHpYWeaSttxzTTCVV21ywJXeIeOVp3F4APm4cLiUPhFED2g8xTwcaVT2GArYMviHdf~xoE3SYOqmXFlPys~-YTYHZgNNYI7FVd5ESDRGSFPczbGtAj7lB34qk6aWRXrESmjHNKcVj-2JzdkgYsYImuk8tHHL1WUkq3A8w1g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://cf.softonicdownloads.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1430863868&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KXq4wXKT5~XzaqulkWGDOHRFRyhVX7LRT~5hwz-dMtYL5H-1NpzXPxAHe15twcoLvxmyj7f3acU1Q2CSK6HwSnJXTPZsJnvXuLRsR7TxcUZUNO-VnaDJocw5BlOXY70oJ5bCY8AJWEpxgOSGEGd0Vn86bCbrWEmmIH9TAavEKms_&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_br&type=PROGRAM&Expires=1468734932&Signature=EnPsSB3xpxK1UZLytEhWXsxa5c7FAqwVUF4sfW6zJeEqvnwTwJcVpZo-sYdxLRT3sCA0iVtO9R5rGRf71IBoHhkL4eaP-UvYzruRwaw2toh7y31AglQ-W0h0Zp7yoXH9xJSPzB2rh4~PouiZ-tzvYosRwV3XB5KpTeNd2R-Ev2o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1480029629&Signature=OBS5Nn7GW8W7Ppxt7LHrit98Rexs1Xs1w2vpXPa1NWG5DIO4~bcVoYPvOq8YJaOLDxZZauhjg5ZM~BoUiYI0OsccWGIkn0BnYM53TerIYzlMo1azIijf~IHQe5UDyPzhxnceN2hciNJbUHCh9I64tMlSHaokY7mw4HML~PX7t5Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1457316359&Signature=Ng-SfIMI5YVjZ~qFNEkjslwKlZBX6tx12xu-jzu6QsdJy6QHlqDJDlH8iqMfRdWnxjPf4ThWIvEb3gjE609n~I5VHnpZ1naXl1hD4ST0rCOLvvCu7AuIN2bHlTk4LnMVeo42xh45ppI8XMALWgGsTtD3OHCNdXhFc00RUJrXzpw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35904&instance=softonic_pl&type=PROGRAM&Expires=1447455165&Signature=KFUwpo3-iVbBQqhW8DuZCI0wlY-N9Inpo0Sq5acmx-FQfRq-Jyc~a~huZi9OgCdCvM6ylOB~dK2bmy-UShgRzoA-NBfQUnuQIY56pPhe7F-OPdw52JwSf1XRxigJu9UkoyfOH1UtZHQgz-vHlF8D1qkk7PduNCaAcUx11lymR-4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1480001387&Signature=eNywHWz5XxtHufu76LBijcFTCPdW8uPCMhokT5rHy0IDSUDti~JZw9l6o6cAqyHXvm-heIOd0q9kO1ciWNvVk7GRnniVHP~vu4VT464HAoG3cro75kxmmlD7Td~mN7RpREre0Y1ggoOltkmpPZ8acXpO~GtcrVflPgrPE0ZMCw0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1475271665&Signature=XFRzhwsf~1VLq-QjIYfgaRciYFn8bd~UZDnf9dZj51Pq-HdEf1E6EXZskTzWIHEO9kzaf1K4eubjyTjgm6zveH84bv0~MfUF6jALlMlqnM5~vo6NCW19DCqJphwrApe9F3qpwXcXpshA0xoaDt0JA~-do2Upd~li2-FBM4tGyuw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1473673659&Signature=OwTw3jy2nRggc5YLc3NQZMLifnlGANkRwCS5nHxfyG6~JpRUH8COEYG4-tk~KFTAi-AwTy7c4P9uUTPrg6GSL--AjXRWyUTd7oDETcTyl320pApCrTYrfx3nRTiVeOLr~iTJg9kwytb8-5wPuJk3OZQTIPpU-NC0WowZAxcGz7c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1473329716&Signature=MV-TbOD8uotHqf13TtZW5neySDy6E6dHOJFJtZo8~2UBXR-I3YWvEULM-Wb~cQpqXRKa8I2C14b95FUXRPpfTLQjxwZdAeWm0uXftsv9AF73S-s19yaNU9oQ0PznN-aM0XG16q1t683os5l2J224emvEYUZb75pAdXbtXqhffbY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1480493786&Signature=Ecp5d1zoVXpy8YfjqLyPrFbUZ0qO37-3~gdaELKvf7pcx70WWCvNVdxraxhE9gAbjOJPfdaN0I6IVmThTzQ8mnmHAOCzwCGev45qDtyQFLY7Hy9jcyvLmlL7AGCe6FBqdKK2NNfYb8XA6BwLTxQuF9Otgy0c7f7Fw2wgPrgBWyk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1435499762&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=B-nuGl1oT4pjTlr~56McYjDzrNyW~U85Xdcy7f0kdAOeCRaGQzHQ5MoMRVLq6x4qlmJXffw9GADB2iJUlP6is2IGNqES6LPnroxU9KmJFYX~ULsvRLjHAf2cqEzq~l-u01GHRb-f~oh3NFmRcFsxbK6w9XY885VHEmfM14WlAo4_&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1477800916&Signature=H0v3X-vW2fC9JYsPQDkKulY6~1kotCT9zf7wgmjoOLA1RKPQsqtol5OCmJzNzkuJU4wUlE35ZnFzYJTdrXqksulao59IE2wB-4mJO-8WW55uS3nm~ftqDD6Kk9dSKt2q0V4CbhM1elcVsOx5o2R1YKIkx3G84AoqCpS~fYrpr8w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1478386851&Signature=KbrhXG-ta7-7S1Axyx4DqYCFxRJ2mortQS8Jq2iVaT8QPA53BJGlULrTrgshfcfubOI7ILf3lDcdo4UZCiixSnH6Cx-I6mLDEjWQpEhGMOGfINAU2EOeaoLF3rJwrjKBSS3JTYlXOaQNqfMammiOMgDQhoS5ALAGT0bcw6SjOZA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1426286760&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JqM4~9Zd7Re8Z0hVzpjdUct9HexPC0egntr~VoptK3pQkMxfM5hg5vDKeIefE5iUmTGwm9FnBbaukyABj9ufXbALXr6cMBpOR-zcUYmc4Btmth73dTvlfoZ~xtr72Ou3m12teDONFsa2zbPjPaD9dQQcp5m3iFbdVWtYBQo5bv0_&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1475974628&Signature=D85-0XNbIZDsk~fGxADIH-xPj64RRx5~okhU-iupTpEHs1PowJQMHTx-yRHcx-WaDcOtibr9KS~n1~zovYblpSi6lfVKk6BDdlyNlZIXF5DFVQgjfaq9t65Yo8JLyABOsJvnCcLfj6gA5MpFaB2GlFvJAUYALc~F83L8AH~4f90_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_br&type=PROGRAM&Expires=1480577753&Signature=JfkIJYNy-Bam4aavJJUwBz90~b0qUkvCe~jQRgxGe00r92bl~T3u~NAfWnVVUalzlfXWXaLFYzCIyRjG14O8-2c~O8AXIStJfEDSPtd5CJCOCPzJZXACjxJ6MgqH-kTm-hNiRhYO2JX8HDQWFfks0xdBcQSKKilOToyqAfPl~w4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1428297536&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fYDWl7l-izSMbL3YJe-xuXGwblo2loLFyJxBVmuLTmJqAX6TxHqUr0jX3GCBo2zJq1CdccQ54aND42e925B1aRlFS2xl0goIyp2YTzHJb5UuZcZBDHYNBsy8V7TgOuTLcHf01SK5ngUPWo-g~ZO2yF~c7~L1yM~rBXUl7t3eBqs_&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_en&type=PROGRAM&Expires=1449202891&Signature=QKZMMjYD2Gf9rF9SRE9l0pbTPAb0VF9-DwX2AIxJYDYMwZQ9eTWCvXcM8XLtAk-xqNZN3I~rAP2O4FXdID3bQ~vsaPOgm4A7hz2jiK7ezLD~MUwWUnSQuo74ZJG2HmS3stoDbfcdQ7uguXOWte7JEJNc6fi-iLWF-Jd6nm08Z2k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

http://gsf-cf.softonic.com/d97/e88/.../file?SD_used=0&channel=WEB&fdh=no&id_file=24673&instance=softonic_br&type=PROGRAM&Expires=1472531839&Signature=MAFbxlQMbqgHE~MIqePhBM4vCiWUC1HS4xyZrPKLG1TrdmSrKzt0L~uFTFQ-ERJB8tkSi9mEwpEEPyOdOKx7uF5QV9tJf~yAVzyVtbkojLNyNdmJ0oyh5-w3j2Y8qJyApi28QlrJc1RqalRS8tLxBpGkt7-0opxaAS9tQDjmFhg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=WinDVD11_Pro_TBYB.exe

Latest 30 of 40 download URLs

Scan windvd11_pro_tbyb.exe - Powered by Reason Core Security