home

7z1602-x64.exe

7-Zip

Igor Pavlov

This is a self-extracting archive and installer. The file has been seen being downloaded from files.downloadnow-2.com.
Publisher:
Igor Pavlov

Product:
7-Zip

Description:
7-Zip Installer

Version:
16.02

MD5:
b748649c754eb8f243b4a7312d70d6cf

SHA-1:
b5d0eaaff3629af8e5c57e7a9229b5debade3f33

SHA-256:
fe865667d5f7ace84edae33c5455c3451950c5e4614cdd454e66fe6a9ec88a54

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:53:35 AM UTC  (today)

File size:
1.4 MB (1,460,470 bytes)

Product version:
16.02

Copyright:
Copyright (c) 1999-2016 Igor Pavlov

Original file name:
7zipInstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\7z1602-x64.exe

File PE Metadata
Compilation timestamp:
5/21/2016 11:52:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:v/WUsRN952DAuStAiUtEw0Z2Wr8aNIvK5lp9fCq4yNiKDEhCjFvrDNNvogi:v/suA6VTusXWRfCKKY5Pzi

Entry address:
0x7104

Entry point:
4F, B3, 6A, F3, 74, 05, 0F, AF, CA, 84, FB, 11, D5, 0F, AF, D6, F3, 71, 09, C7, C7, AC, 3D, FC, 87, 1B, C6, F3, 78, 04, 86, D7, 8B, EA, C6, C6, 74, E8, 00, 00, 00, 00, 0F, BF, CB, 85, C7, 71, 06, 1A, DF, F3, F6, C2, F4, 33, C3, 84, EF, 5E, 80, D6, 60, 43, C6, C2, 9B, 8D, 2D, 42, EE, 8E, 80, F7, C3, A3, 77, 9E, B1, F3, C7, C7, 8E, E7, 12, C3, 81, EB, 7B, AB, 00, 00, 3B, D1, 71, 06, 8A, C6, F2, 0F, AF, CF, 81, C3, F0, 01, 00, 00, C6, C5, 8E, FE, C7, B9, 61, 76, ED, A8, 85, DD, 73, 01, F3, 88, C7, 24, E0, 72...
 
[+]

Entropy:
7.9952  (probably packed)

Code size:
25 KB (25,600 bytes)

The file 7z1602-x64.exe has been seen being distributed by the following URL.

http://files.downloadnow-2.com/s/software/14/68/79/.../7z1602-x64.exe

Scan 7z1602-x64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.