home

tl_winterwhimsypack001.exe

LightScribe Template Designs - Winter Whimsy

Hewlett-Packard Company

The program is a setup application that uses the InstallShield Setup installer. This is installed with multiple programs including LightScribe Template Designs - Nature Pack 1 and LightScribe Template Designs - Pets Pack 1. The file has been seen being downloaded from www.pretzellogix.net and multiple other hosts.
Publisher:
LightScribe   (signed by Hewlett-Packard Company)

Product:
LightScribe Template Designs - Winter Whimsy

Description:
Winter Whimsy

Version:
1.18.8.110

MD5:
1c74bec3b7c1f39dbd97ba4352884450

SHA-1:
0fb46539c631a6e24da95eaa884d98fc0f5dd17a

SHA-256:
4911a7912effc4997585e21619e593f073136ab0e84bd0797871436b0907b2a9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 9:40:46 PM UTC  (today)

File size:
4.8 MB (5,032,168 bytes)

Product version:
1.18.8.110

Copyright:
Copyright (C) 2007 Hewlett-Packard Company

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tl_winterwhimsypack001.exe

Digital Signature
Signed by:
Hewlett-Packard Company

Authority:
VeriSign, Inc.

Valid from:
5/6/2009 8:00:00 PM

Valid to:
6/5/2012 7:59:59 PM

Subject:
CN=Hewlett-Packard Company, OU=LightScribe, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Hewlett-Packard Company, L=Corvallis, S=Oregon, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2FD030613590EA35BC1FF96BC5CEA23A

File PE Metadata
Compilation timestamp:
9/10/2007 12:45:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:b1QGP/NhW41r9w3n564hO4VCsLMe6O0qU71QPrVR+6sDAhbZh:b1QiVhW41rUn5XhCsLMe6O0TsT/HT

Entry address:
0x2996C

Entry point:
55, 8B, EC, 6A, FF, 68, C8, 70, 43, 00, 68, 58, CB, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 78, 61, 43, 00, 33, D2, 8A, D4, 89, 15, 04, 56, 44, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 00, 56, 44, 00, C1, E1, 08, 03, CA, 89, 0D, FC, 55, 44, 00, C1, E8, 10, A3, F8, 55, 44, 00, 6A, 01, E8, 15, 1F, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 30, 10, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9397

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
212 KB (217,088 bytes)

The file tl_winterwhimsypack001.exe has been discovered within the following programs.

LightScribe Template Designs - Floral Pack 1  by LightScribe
Publisher's description - “These free design packs are designed to work perfectly with our LightScribe Template Labeler. Just download and install any pack you like, and the designs will appear as new choices when you run the Template Labeler.”
www.LightScribe.com
About 1% of users remove it
LightScribe Template Designs - Hobby Pack 1  by LightScribe
About 4% of users remove it
LightScribe Template Designs - Holiday Pack 1  by LightScribe
About 5% of users remove it
LightScribe Template Designs - Nature Pack 1  by LightScribe
About 1% of users remove it
LightScribe Template Designs - Pets Pack 1  by LightScribe
About 6% of users remove it
LightScribe Template Designs - Urban Pack 1  by LightScribe
About 2% of users remove it
LightScribe Template Designs - Winter Whimsy  by LightScribe
About 8% of users remove it
LightScribe Template Designs - With The Band  by LightScribe
About 9% of users remove it
 
Powered by Should I Remove It?

The file tl_winterwhimsypack001.exe has been seen being distributed by the following 2 URLs.

https://www.pretzellogix.net/.../TL_WinterWhimsyPack001.exe

http://download.lightscribe.com/.../TL_WinterWhimsyPack001.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.