home

windvdpro2010-tbyb.exe

WinDVD 2010

Corel Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from i_mp3-es_intervideo-windvd-10--2010.fackidremioso.com and multiple other hosts.
Publisher:
Corel Corporation  (signed and verified)

Product:
WinDVD 2010

Version:
10.0

MD5:
d64fdaeacd9c8c419a70242023948e15

SHA-1:
832a80a42d6ba76339220ba3bb0463520b6f7b63

SHA-256:
35287a7d05b905d733c5c2b505ed767eb66e1af4480e97bbc9004801a773bdf7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:52:58 AM UTC  (today)

File size:
155.6 MB (163,119,768 bytes)

Product version:
10.0

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Corel Corporation

Authority:
The USERTRUST Network

Valid from:
3/19/2008 1:00:00 AM

Valid to:
3/20/2011 12:59:59 AM

Subject:
CN=Corel Corporation, OU=IT, O=Corel Corporation, STREET=1600 Carling Avenue, L=Ottawa, S=Ontario, PostalCode=K1Z8R7, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
25AD846CEA1CF138597FF6854C50F38A

File PE Metadata
Compilation timestamp:
3/27/2000 8:09:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:NldMA8irIp0Ga16SAs2fClIswSiCfY+g/w6c+9LQ6L01V4Vfj4ryK1gJxrks:NjMKrSDlJClX8CfY+g/d040IVfj4uagr

Entry address:
0x83F7

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 23, 41, 00, 68, 30, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 21, 41, 00, 33, D2, 8A, D4, 89, 15, 30, 53, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 53, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 53, 41, 00, C1, E8, 10, A3, 24, 53, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 21, 41, 00, A3, E4, 68, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file windvdpro2010-tbyb.exe has been seen being distributed by the following 8 URLs.

http://i_mp3-es_intervideo-windvd-10--2010.fackidremioso.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://i_mp3-es_intervideo-windvd-10--2010.flosadireflis.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://i_mp3-es_intervideo-windvd-10--2010.figloreglasxu.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://i_mp3-es_intervideo-windvd-10--2010.flofcoredis.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://i_mp3-es_intervideo-windvd-10--2010.foramuinareqy.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://s10283.chomikuj.pl/File.aspx?e=1DepHdT8JGiJYIAetLio5XO4g94K3qHhX99PfMb-zfzRqwZx8MkUP4paGyELxDF_u-ENZaD6sPDc0iqh8gEkMIoNWfTtCKpWixA6aqtvU1lyFAB4E3j_B5iP0ahIDDM4EpD_KaA44yeLflTCuSOBVQ&pv=2

http://i_mp3-es_intervideo-windvd-10--2010.fhoaicoraresk.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

http://i_mp3-es_intervideo-windvd-10--2010.fhoaicoraresk.com/crawled_soft/3/6/.../36427-90710-intervideo-windvd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.