33903-652298-winzip-self-extractor.exe

WinZip Computing

This is a setup program which is used to install the application. This is installed with WinZip Self-Extractor. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
WinZip Computing  (signed and verified)

MD5:
0e5badd1fc81a4aeb38f6f546de3f845

SHA-1:
2851636733dd09f656ecb353615341eb73b05044

SHA-256:
2dcaca04e231329f6487acfa75bbbbda515c3968f1d9077e21a05d64d599354d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 9:01:34 AM UTC  (today)

File size:
2.8 MB (2,897,248 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\33903-652298-winzip-self-extractor.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
4/14/2009 2:00:00 AM

Valid to:
4/14/2012 1:59:59 AM

Subject:
CN=WinZip Computing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WinZip Computing, L=Mansfield, S=Connecticut, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2091EC663B9B070DEF16CA9A237B705B

File PE Metadata
Compilation timestamp:
11/2/2009 9:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:wWBjFaEPkmTEkvwcMYL7mNpNK/VhmHqDhz/Tin7LY/JuO099CltIcTTmVJrdi:3jFaEPkmTEmwe78evDh7enAP7raHdi

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Code size:
144 KB (147,456 bytes)

The file 33903-652298-winzip-self-extractor.exe has been discovered within the following program.

WinZip Self-Extractor  by WinZip Computing, S.L.
Publisher's description - “WinZip® Self-Extractor creates self-extracting Zip files. These self-extracting Zip files are ideal for electronic file distribution, because they contain multiple compressed files, minimizing download time and ensuring that important files do not become separated.”
www.winzip.com/wzgate.cgi?lang=EN&url=www.winzip.com
7% remove it
 
Powered by Should I Remove It?

The file 33903-652298-winzip-self-extractor.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1476599629&Signature=SZncXVXnyxXM8buBsj0-QDRpy7sbcAVQt~3ouScoWYJ~dzgu~dIhjh821CEOn~koyRApRGO39EQO4PFm36Jj-8H7jFCOMaujbbtolgwKghYFWC5IH-fTrf7DpzEyiarqcqG-PSH9AhnzLZPykKHdRIsVwpg7BrTGzlNNq06S3oQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1441956253&Signature=e-X0JKdEEoP7uq6HE9Pdbn504uP1qGSozd2KhSdcwkwCkb3GoneTS9TLR1wJAHwYr~zGsk~OiU9B0yTMWLeZ~F46DK0~~Yi9Jcemxv8L4O9hom3Yq1hZ1wyFIRyhyjcNF6S~GhmGSacUgfA4VW0YheyuPuDTCwMIErpKrVmhPsA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1450639766&Signature=Phib79CTRQiXWKxEWQGpg-ZV9fe8BitjppZfsVLFhsaUnM~eIuBCArX7oYMYRFouSIYPJZyodESYh5pKY1z1uP3QDXDkP84GA-WjYkMnV843FdQdYrGRWv-M8Fq3MGc~49Lf7CDCAe1hfjhYqOTOYSoqUNRxnw93xjZ5bZh8OuM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1460364374&Signature=cL1rxmdW9QUrYzOa635AYXiWgmT417lyl8GJBFmthplvk5IFcEVZ-GYN0h6VKrnwjdc0vFyNfXUuRPtQR5NgBVTDXcMSJA~pC3LnurocQAD8UOzvgiNwNe5oCF9m67ulh2lcQyH5bg2A28ANRIOBgjeTzZIM4L6pYnov-LtgAKo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://www.worldflashfarm.com/XgRm_7EIOzAGhkM7SoZPBpcetVSFe8TvvByg6NqedBSTeqTvEh_34kaXR9QMxRXyfXvU3gTQBqfXiuER5UzvvHkyQe8_fM2iP40qk7DQVkqKrcRxQ1RmmEkLkwcKtDGPKJhtQY7YWpMmTBQX3hSZ6mB7QDz4SrZQ44k0DKSKlol8w4XfddEDhmA0TgNMNJkTGZO75Q5a1Eoy6A14TXXsoRgXIl9M5pwcW2 nXGrURnTxd62UggEPp5KopzWls0baGwwjwx27HnDhlYwQtZSJfWb73ujNED35HGEdKa2Drhe_NvOsf6CFurUiQ6jYuZ2A33oKRQ5YYq52_Yj9JGq6ciYKa8xKWpj6d mLyFxXbUbD79gTRDuHu60ATgU deMnCFfk3SDgXtbiHHIQH8kmMFj45yd0w6dUd4C4ksRQS7pm8vLwXAWXrMe_p0ky3nSnTqnm uF9iofszqU80JGGsWqSJ2ksftYqjIeXDRSYkbFp1uhzJI4rH7t_mVvbjp3mmE7914ZP-G1wAAGRwXmtrO8AIdoCwAQcuWWKDDmAT3pm2fdKe57oE Ea6eV7KsWgkEfp089 tUFBY8y7OZUeqt1KPU9b17Cf0Dsstj18r8vNHbnIDUMk4xZE4w_IMAw==-e

http://dl.cleverbridge.com/852/.../wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1456444565&Signature=f3x0VBOHLY1a26~p-nZuUnfcu4ahzsK68gu0ryYYoicwimSo0a2jaMga4TapmqkEZIKNRYJUOMh1hLa-1tHesg6vY87rJabaAJOH1fQ3phRYsN-31LUziIPwe~mr7qsPNkdva1UWXelM3EyS7Mje1T4ZJkAcdoMwi1bg~6Q~34I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1466558075&Signature=N9sAbQab4P11xivf38Zr0ubJIeeQ9QubTixElTtbhDx8gg3W3gvm9AgFSnl0~X0aFD3Sf5-mI~Qs9zt5AiG4zgCwlHHiuNGSTEjeHZYNA8mgDMTDxoghXQU0tiUw-mI7Rvn2USnGETRJzOwJV2tG1Z4oZVqNqTdV5cElnzQYTxs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1473792608&Signature=M9iX-hryEnExQHp83ZOxqeZlLWpTQUmHIASF9DpeViZd8-Qe86hfMDk18DYp31-V-nVMym5Sn8QfndAwejQ3pAANOlBIG-yEvZznx4yeke1i2gVL-04XHghz3OscgKAX5oQhUAntFRyd~QxhL-s2GP-7EjiLtIhZiH7-0eutrgk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1477883873&Signature=ObO-cO3fCHd4G4zUGotPuKqSyCTBQb3a6CaoRQ3CpK4OidiOkIzxUBkPmrAXW95eXqd~lyrk24OSIXRWYF7KxjCXHQHxlCzi9RmlZPllP5K-pG~Nps6fbgVl~V2v1p0PdPnLjrKj6pTXfdzdm35dH763SQvfnFV0DRwvxc-BOII_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1480750603&Signature=ddWIunm1ZwVZ3U1IoW5K1l8ck-tb7WTY1OkwB8CGGc-czt8AdniD2SOtiQ3yMEgEoZoFQlOc0xLggi1Hy4eKW8oq6U~7a2suJTs~PTfiubuE-hjG~QWIC9tq1oiYYFMNuwXpM2AnoRVWvT~ctlzBAsWxyjJYHcMU~2x2XcQemNs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1477577928&Signature=I-swvJzo-D4wX4NQoWuyd48uMDxEsz2Bp5s~SS0o~pKjlWwmgdfkT4hBntPYazhWrtGMK~vEbTp3vdI7i~FHZxxsaEu4b4t2-kpoTPb8lIy1ysqfT7t38q00wg~o9D6aNI8CTkYHsoY3qKQpf23HxXsYAVsnoseRip9aBptKwDY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_br&type=PROGRAM&Expires=1478686703&Signature=GBUHI1w~9PQr2qyEp9ED72~9wNRmmk8H2kIX~gQawI5rXRC4RS7~pu6m1OHwUx60y95kKG1SYzoishgX~RdwyOdazUtzJpAUn2wUUctHjtQI8BLUKuvFzG6ryL59hLh-7vfVg6jhDmDysUidP1ogGZyCwuKWhA3eoycG7UXW6Jc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1479959411&Signature=EyLB1YDfUDN0V2zqWf72hiwf8Z~le5OU4DI5FqnP8S3sl73b1qgQTZoJU-kSTt~3mzrc7k0NskWSPAkdNk~ixkZWWPIA9BvZK~O-d~2tGePYjgiy8k6oU6H~2GqMnq9FuS9YDSaAGSURSEYf1XlL1eatURl2ulKoiPlyxGbaH00_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1462404867&Signature=Cf7FtbNsdLOnjasgIO0qeDhZ0alQJhHpbdFQRTyLWYuZIgfwIRRdc2BTbiiWQLmFMsv10xlVhXgIgknQMvczgz1c447-3iiGHddAXGpNm7Ea30T4OaLZd~7-yI6o40U1fdbEvzksaMyEOF7j3zbWA0iIHN3iorj78vuJLmQck1E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1461073101&Signature=OHKlr-xkIcLCfnJfkZqDVtLRQx7nc4xfNzCnbb-UjcHsHabVz9~wOTWH~oLk~vaafGSdK1FSUFvxMnGnOg-MTdS6PLOS-KUjHJaNmfHt0s54j25zFsVC2gZqIZLB0jrPmn7TkgfkfRKh2zGz7UsTlnSl6L03JSPVpDjDXtiwhjY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1456472369&Signature=NxnO58ni15UR-z3LFFO1Fh2hFo7fIcPXAp8IdqteEaPKR5i-M5sefOWNQlMTWOHo7rg6IpUtZia1WTPnJ6wXvZt7naATekZgQLicKwkSWvmCgeb8o5T6b14W4tVgY3yZ5MXfqTLXZlcsAtVbhMniwxfcvglZKsomcpE4SEK9glg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1477352593&Signature=RQgRGWFV02XzHrOL~FSgCTqcqeyHTb0zD2qNr5D~Lj3qpLoLFSr-JsNNGCl~Jo2dGPkdtPRA9ZaxaW5EHom8UDjJXGjsuHZZAHJulv4bh4FYHXZ0gqUBz~JLpaw7hIoUElzNSV7Y5xSWZovUUxq0StQhK7kCBMy286GKVY~BK1I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1462634239&Signature=HAPrht4W2I3vwTy2Kop7tvA6OAcVQzw6vUmdMX2mHPDCvI9YqJw7hpt0wvxpefqhuawqS7nLOqnZUIiM39-na0mBuagaE1GwC~Uo8ohWIVnqvl-sNhqErJy1oUGkNvBPeWsdfDSE-97I7QrP940l2p5CDWb9G3qbkRrQmnna5BE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1477937540&Signature=egS0oOPC0BZDM3wURsuaUzYMCzpbZTBzZxX~6KL65SEetCZVkijmVmpFVsFJUfcfD7v-4P11pu1vd473YTaEkqyq04ftDu8ittQvQ1RtrDfAaSlYm3Hl3Hz4mGY70QQwuvQ-cr1AHP2DYf6arEdb97TDl6F1POa3k1eAO7HQVCk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1472627470&Signature=bJ45m9TGHuz9SBRtId046J1qnyzJl-KbEa96Ox5N~CF8qObJBZcVx7YBaCbBYibHSZwJxIAD-1-rtfg-qcQU3vO2q~zAcQa99MW1GvyJNDd6SnFzIuTjkd9yYo2UZWgmbnk5Kcj9l5PhV-WFtode56EV9RlSn0U0QUde60tG06E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1474686668&Signature=EqyMBxGLShb94i2P8mPvgrMueD7~3~~s3uQbrVVNiiFn7mJGPjxES0yvzT-TsedQhOCUTCx9bTlSuhxtp4XHi3kBQkOA1UcQIzPclIwjBrZbpyq-OlksOdL6Fi0bMtK~lpNoNot3DQ1F-2nqqYc9C~SytPp1peB9RCPQOZ3JUL0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1461899011&Signature=NhAkKsCQoTb7ND-PxXSQa1tewpQWX5HpeM5XQWRo6GvIPJ0C9ZALAfTuvvG54rNT-vULP8aoHtRCjd6pshYxbyormw4NWATYKNCLFrSEcTRLEykY65RgG0PPdnZ2Fl4FeE0sn8iS9eXx039LkiT6DAV8eZ3GqMmhe7X0~aRuygU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1460089724&Signature=eNRRG0ubnx~PARfVjWPyBhYhUwe-ID8PIpD0JcjZP~ypJyVIl9gBZfzGaL0U-wqrYI0p2K4saqM0kJT6lXNt88-t5YhaVoCj54BIrUZtssow7drbPiAlhQJMmvrgMI5xZ7cm8fIzhsv8zrxvMpcyb0m5x6~UaBQlKhXavt5nvvI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_en&type=PROGRAM&Expires=1473230306&Signature=DP~PjiSygpaRKkTkIgSM8dFUzKCeSHO-vETeoqRJFVdRbNpu6ykQPooYhb02DeLQeD1PstrBgEIudCZYPrIJxC~YniepPqUKRkdIHMXWoo6NSyT91cNKbM5O8zUw2TAYQaxKEGQ7JmXL-wuDrFxX8lxIJASPy~SJe7zckMdEO3o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1476616099&Signature=UYR1-kxYqV0snO7JNv0Ftx2lW5pPB2lQaGc5sKsC0qD4B-wiFzKg9FpfyZqe1B9dAYeAHlJELWr0WDZaDexC7gVodQoCW-OMy9rb0-x6nHcC~XkyTRJR2xlkm6vP4Ty2IkUX9ygIRt5A5ZUOq5kB7jdGNCzi6y3Ud5bW~B6gMcg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1476338977&Signature=QOSQSCEICPH2q-bIVpLh1Kb3jjG4D0eXsacJTuYAdQTrk8JnfFzTspjT3lt-JZ1EPuQIFAh9Qt5yid4~5QVaPZRBYV85~z5-W4~nRt39nYx4z4tUkWyBwMqu96Bo~ZDADrOaTQvl1ts54ol~cENNY2sUtHfRMyMcg5PZ2IqqQ08_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1477284556&Signature=ODiVHJFalqLrbXE44ZWHJP7aMNLaEVMi-59uFI6-jjF~xpxBcTZ~r9BK3TaHDjAEtbf019nVgKNy6rGgPX6KzIPBRP9KwF4U-jzud~qg4vOYCN4ffaSdQ2AKYx-X0w~q-Q6rRaaRA5Fnc0c86JvLVRVGgE7h8q6lL9Qp1V7~Fu4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1479258645&Signature=V8gy3Sy8zI~~gIYXelcoKM7GsECnwFtl87WJ-RQRUE8pnCJjKsDECEw2Fi~u~IOERp3ym3UKaqOikZtKD1nri~VehSscssGSbemQfpoGGkpslsOJHebVWfP9j14tyBeb~tKMoh1pXhQZapMjxSOZSujBAk2tdOiorhrDbmmn1KE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

http://gsf-cf.softonic.com/285/163/.../file?SD_used=0&channel=WEB&fdh=no&id_file=1423&instance=softonic_es&type=PROGRAM&Expires=1461599853&Signature=iuYrTGbLFHh~T33DFD2-s51lriGJL8FL5TDgeip8CteeKUdxvmZT1AMIaPzKD5PWUx8r~RQfyqzD2xCAWaO9xC4GWCErtUK0JDKqhkUISBE4aeBu6VbgkMNUCjfemK265juXrVUUeHfWpa1nyf8~1p6mAP-cKKnXM-CMKkJB2ns_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wzipse40.exe

Latest 30 of 76 download URLs

Scan 33903-652298-winzip-self-extractor.exe - Powered by Reason Core Security