home

roxioeasycdanddvd.exe

Corel Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from wgtot35.digitalriver.com and multiple other hosts.
Publisher:
Corel Corporation  (signed and verified)

MD5:
eecb774ae14d33dbd1ebb57966a55771

SHA-1:
f46831dab05f368df114b4b37cf254778fc5b585

SHA-256:
914a99c6591ce17678eaff5df399166b152b1ab51114630200eecc4035497ddd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:45:47 AM UTC  (today)

File size:
1.7 GB (1,842,252,432 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\roxioeasycdanddvd.exe

Digital Signature
Signed by:
Corel Corporation

Authority:
VeriSign, Inc.

Valid from:
6/18/2010 1:00:00 AM

Valid to:
6/30/2013 12:59:59 AM

Subject:
CN=Corel Corporation, OU=Common Engineering Services, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corel Corporation, L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4D44BE05E1625BEF48B87F1477A76FF7

File PE Metadata
Compilation timestamp:
11/2/2009 8:23:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
50331648:ooUc2AklkyWoJITUK764bKeYep//ZMBkvLVtFyb:ooU27yoZ6be0Bkvsb

Entry address:
0xA79E

Entry point:
E8, 6E, 4A, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 20, 3C, 42, 00, 89, 0D, 1C, 3C, 42, 00, 89, 15, 18, 3C, 42, 00, 89, 1D, 14, 3C, 42, 00, 89, 35, 10, 3C, 42, 00, 89, 3D, 0C, 3C, 42, 00, 66, 8C, 15, 38, 3C, 42, 00, 66, 8C, 0D, 2C, 3C, 42, 00, 66, 8C, 1D, 08, 3C, 42, 00, 66, 8C, 05, 04, 3C, 42, 00, 66, 8C, 25, 00, 3C, 42, 00, 66, 8C, 2D, FC, 3B, 42, 00, 9C, 8F, 05, 30, 3C, 42, 00, 8B, 45, 00, A3, 24, 3C, 42, 00, 8B, 45, 04, A3, 28, 3C, 42, 00, 8D, 45, 08, A3, 34, 3C, 42, 00, 8B...
 
[+]

Entropy:
7.9995  (probably packed)

Code size:
72 KB (73,728 bytes)

The file roxioeasycdanddvd.exe has been seen being distributed by the following 14 URLs.

http://wgtot35.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BD6E4B9979C1583E44FC0A91049C192748E2805C08519762B0D06F1F9B0BE11C84291CFF17835666117BA5ECAB09CA108DAF6F5FEEA5A3EAD4C3CDB9A445B4EC65C301D4CF6797C8A/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot45.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B159FED8FAA555EEF8D273C5554AF20955BFF19F726A8AED71E75C00A0EAE62352EEFCB0AC19327774236D2C1E355825241D7915C844641C47976D00437CB5E278F5DC70B1E40C906/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot34.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BD6E4B9979C1583E44FC0A91049C19274CB95728EA50DA959C9E96A80417D400B6BC0455988C510810CE94B8079C491BBF4875AF20F732F7E2DF1A5E730CB69DF0451C577DBEF2976/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot62.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B4B85D609F996ECD78D273C5554AF2095469FE0FB38AD4D8EE42F66BA44DE77EDA63CF5B5542C24F184B8BAB744656485F379D51EB7B70136900DB456B3CDD04E8F5DC70B1E40C906/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot35.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BD6E4B9979C1583E4DF43E3C81E02C39FFA94A7AE0B3BB3A6FF8D84E6A1D985B2204C809732FA1DF537EF194BD231DDCB3CBE39F2238A5C7462B4F210A2239EEF5C301D4CF6797C8A/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot34.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BEDDF19CF2907C848DF43E3C81E02C39F001190B0B43E462DEE34CBA244CB6DB9EB3EBC0E7BF1020A99EECFE7A105A9FE61A1E040907C0079EAF26EBA580C16060451C577DBEF2976/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://cdrom.digitalriver.com/pub/sonic/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot34.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BEDDF19CF2907C848DF43E3C81E02C39FAF388FBD3385ED4104A46D2E7601374B16EBD46E31F8C3010BF64EF47D2B2B6EC04ED9C6FC38BAC007DCEA20F71DD83F0451C577DBEF2976/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

http://wgtot34.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BD6E4B9979C1583E4DF43E3C81E02C39FA9C5D194D0917F20E59B051098BDAB05A6F0851A71220BFB47A0127B0183B705522CD843841BC3E5C0BD3E547D3F580A0451C577DBEF2976/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

https://shop.novadevelopment.com/.../download_link.php?type=master&id=30c8d101c3597bf984fa55d6dc7ac0fc14426087

http://wgtot34.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7BEDDF19CF2907C848AED2158FF904C1D1F207C11D223933C2C648C22B27E1EF023C5E0075FD628994C04211A37C712CA92C3B6E734A44512BCA1F4A97EB5CE1130451C577DBEF2976/.../RoxioEasyCDandDVDBurning_LC49CXD1ECD.exe

https://shop.novadevelopment.com/.../download_link.php?type=master&id=9bf1fc8d09762aae3329494bedb558a312957229

http://download.avanquest.com/file.php?id=9bf1fc8d09762aae3329494bedb558a312957229

https://shop.avanquest.com/.../download_link.php?type=master&id=9bf1fc8d09762aae3329494bedb558a312957229

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.