home

showbiz5.exe

ArcSoft ShowBiz

ArcSoft, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ArcSoft  (signed by ArcSoft, Inc.)

Product:
ArcSoft ShowBiz

Description:
Setup Launcher Unicode

Version:
5.0.1.333

MD5:
b25deba0e6c22af1219298c9c56d7e67

SHA-1:
30941f2dbf2409d123e2e0e3c24ecb85ce8d664b

SHA-256:
432ffc723940c94515b55d8c44d1c2086a6e346d7df35b0d7626acc743048e7e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 1:38:23 PM UTC  (today)

File size:
119.1 MB (124,856,328 bytes)

Product version:
5.0.1.333

Copyright:
Copyright (C) 2010 Flexera Software, Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
ArcSoft, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/23/2010 1:00:00 AM

Valid to:
8/14/2013 12:59:59 AM

Subject:
CN="ArcSoft, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="ArcSoft, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
39084E9060237309927F12E072B274ED

File PE Metadata
Compilation timestamp:
10/5/2010 9:39:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:puQmCOOa/fb160plZnDn/+683PXGSraqy:ncdboO0/1y

Entry address:
0x68208

Entry point:
E8, 71, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Entropy:
7.9995  (probably packed)

Code size:
684 KB (700,416 bytes)

The file showbiz5.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/309/41f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43245&instance=softonic_en&type=PROGRAM&Expires=1450111524&Signature=KRdOS7NMcseI4KMUKR0kbFJPEvnJsu~L5WfpLMWBn7ZBr2koLTOI~dI8I~Phpn2PXwCugS~fXE8EQtggq-cjpPtAYpN1ANpm2qpIEUGuCy5VRe4NKtHNVu7F5bxO60TvzUggfYk0r18IHX4N1SeLXdR5qXDc3bkARB1kDvWaAqo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=showbiz5.exe

http://gsf-cf.softonic.com/309/41f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43245&instance=softonic_en&type=PROGRAM&Expires=1475938232&Signature=baMFS0zfNrpBynp-7f2VA-rz7TN3GvnDuBLjsxyvGztV5ZAQ5otLswKFwXPf7WO8W3U8doE407SPsvBdvTUkug8eOekLynucppUzdb45c2ieR2GFJhoubdmNq4sFfHmvKvn~o6cQlL2-0SjAMz6px6I8vqr5uxfO-uvDs~kG0NY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=showbiz5.exe

http://gsf-cf.softonic.com/309/41f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43245&instance=softonic_en&type=PROGRAM&Expires=1451102949&Signature=D1NHq47lJkLOaxLCi2w30CkLRQpGcu7w2duIiGpvhvnVWn4ZBNmRff4z0l117KhCrcYsRqR9Q-dAvxBlrKkjEfV-DvgDuNWJonkiFvVzwh5blFwgvAbofvZbz4rgEJahDfmba6XnZxomrx7dcA0W1FUItLPVFtQPHiOtMHfWH~U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=showbiz5.exe

http://gsf-cf.softonic.com/309/41f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43245&instance=softonic_en&type=PROGRAM&Expires=1436583269&Signature=G2BvgpPzqZ9zIIdWPwp41PWiBCNwowZLKF~pe320aGLdT2n3XDnR3n0wyXWaPtU5rerYMQZqxX7SJRupTeV-6MYjLYfQw4S7YXheIl9MnBTTRmqjLDP0FdG1FX-JU3TBlHGvbXCbpke9f4fWJ3a5fOZW5U9p7MQ2ZUmO1TZotW4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=showbiz5.exe

http://gsf-cf.softonic.com/309/41f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=43245&instance=softonic_en&type=PROGRAM&Expires=1455549786&Signature=PTZ6Gv-yFNQzkyLqfZntpq73GlBowX~GHh17O0xBuWr9zEbXYwrWN8CSdbH9gx1id0I0IJXrq8FQXAVLYMIuIHzRYZNWYPt5iLgQm3NSv1OuMpnfVkltvtzVtwtY8ESVYPYHVab57RvSSYvLEaYLKIbEtrZl39YcKhOlkqC5zOg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=showbiz5.exe

http://arcsoft-showbiz.en.softonic.com/download-tracker?th=1/.../SKbrb7doaF6FkgHqIMSOotqj2Dd9tEdriALNH6PvzlyWCuRMHNONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

Scan showbiz5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.