home

corelpe5_x64.exe

InstallShield

Corel Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from register.cloud.wacom.eu and multiple other hosts.
Publisher:
Acresso Software Inc.   (signed by Corel Corporation)

Product:
InstallShield

Description:
InstallScript Setup Launcher

Version:
16.0.400

MD5:
e89f3d20e571db1fb676719e5b09d2a8

SHA-1:
60b9dc0d3afc31505d3e1fb1e023c1ae9a46dd64

SHA-256:
106bc0eb2bd7e5fd31a0c09f8ef435b3025cbee906cdfcd4ea7660a8573a3405

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 2:34:59 AM UTC  (today)

File size:
223.5 MB (234,395,352 bytes)

Product version:
16.0

Copyright:
Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\corelpe5_x64.exe

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 3:00:00 AM

Valid to:
7/25/2016 2:59:59 AM

Subject:
CN=Corel Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2FB9C9DD5F7C9624F15C832E4D735D1B

File PE Metadata
Compilation timestamp:
9/22/2009 6:59:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:D2/5bAlCCMdGvW9eLekBhjwcbnNxy6mqLkW2D6mzMn0+:DaA/Eb8iK/bq5WGMnl

Entry address:
0x3D484

Entry point:
55, 8B, EC, 6A, FF, 68, 50, 85, 46, 00, 68, A8, F0, 43, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 24, 73, 46, 00, 33, D2, 8A, D4, 89, 15, 88, DB, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 84, DB, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 80, DB, 47, 00, C1, E8, 10, A3, 7C, DB, 47, 00, 6A, 01, E8, 43, 38, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 28, 15, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9987

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
406.5 KB (416,256 bytes)

The file corelpe5_x64.exe has been seen being distributed by the following 50 URLs.

http://register.cloud.wacom.eu/download.aspx?token=321913c6-2ecc-4944-ae82-e031e76d1c03

http://register.cloud.wacom.eu/download.aspx?token=aedf739d-71d9-4e1c-9fc2-2141b59f5ea2

http://register.cloud.wacom.eu/download.aspx?token=1ea1fe3b-bd30-422a-98b3-7b36b6eb5aa0

http://register.cloud.wacom.eu/download.aspx?token=258b824b-4a85-4238-b85e-eff7fe5cd216

http://register.cloud.wacom.eu/download.aspx?token=31895214-7567-4577-aa04-1dd48a5a285c

http://register.cloud.wacom.eu/download.aspx?token=4e8c4c3e-4cad-4c93-b519-390ac96e7992

http://register.cloud.wacom.eu/download.aspx?token=060b7c69-0b75-4436-98cc-93ab6b6bc96f

http://register.cloud.wacom.eu/download.aspx?token=255c2a21-b298-43f6-a31a-c2fee44fe928

http://register.cloud.wacom.eu/download.aspx?token=b8f8c733-d9fe-4ee5-842e-c6ea9b9aaf12

http://register.cloud.wacom.eu/download.aspx?token=bfb2fcd0-8cf1-4afd-a41a-8de02a7c7638

http://register.cloud.wacom.eu/download.aspx?token=b9157e66-cfbf-42a4-8865-093d16483666

http://register.cloud.wacom.eu/download.aspx?token=d3cbd202-da9e-4ce0-9c85-d455f860419a

http://register.cloud.wacom.eu/download.aspx?token=6adb5f76-0f9e-46ea-943a-496b0a4530f2

http://register.cloud.wacom.eu/download.aspx?token=2012b3af-98ae-44b2-bb12-d760da9721ad

http://register.cloud.wacom.eu/download.aspx?token=57917057-f497-4e74-bada-4b4f5f58880e

http://register.cloud.wacom.eu/download.aspx?token=a7b8761b-534b-4231-86c1-718a15c6486d

http://register.cloud.wacom.eu/download.aspx?token=ceb1d9ed-1aed-441f-b344-a90258953001

http://register.cloud.wacom.eu/download.aspx?token=fcd884b7-ca98-4c1a-9a9e-f51ee2ee1dac

http://register.cloud.wacom.eu/download.aspx?token=64c37ab8-4217-4809-b5f9-77a068bec9f1

http://register.cloud.wacom.eu/download.aspx?token=e4566d4f-2278-45f4-9135-5fffaaae1de4

http://register.cloud.wacom.eu/download.aspx?token=5db8e4a8-5144-4701-a7ea-403cdf0b41e4

http://register.cloud.wacom.eu/download.aspx?token=be374ca0-0f7a-4cd7-9af4-08191b84e2af

http://register.cloud.wacom.eu/download.aspx?token=ddf2bed1-9226-455b-8c35-7607e0cb104f

http://register.cloud.wacom.eu/download.aspx?token=317f1617-fc27-45bf-9f88-00ef6e0c4785

http://register.cloud.wacom.eu/download.aspx?token=7da70c72-75a4-405d-83c5-3547093dd32a

http://register.cloud.wacom.eu/download.aspx?token=45b20d01-4001-46f7-a6da-6b28676e28f5

http://register.cloud.wacom.eu/download.aspx?token=f11c1243-67c0-4e24-a616-641fac9a8759

http://register.cloud.wacom.eu/download.aspx?token=0f673e97-86c3-4200-88a6-97881d664499

http://register.cloud.wacom.eu/download.aspx?token=0186fa39-1ac9-4b48-aca3-b523fc0c3f82

http://register.cloud.wacom.eu/download.aspx?token=3b432568-5a46-481c-902f-bed109d71100

Latest 30 of 54 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.