winzip170-32.exe

WinZip Computing

This is the installation and setup package for WinZip, a file compression/decompression utilitiy that has a GUI to zip interface. The installer might bundle additional software offers during setup including the AVG browser toolbar. This is a setup program which is used to install the application. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
WinZip Computing  (signed and verified)

MD5:
56200a8c47948a563720366a82410090

SHA-1:
07463dd68ff353757f5c571fe829a20c46d790c0

SHA-256:
8877d6e314cec7fded2460feb35d1951b38735ff2790b235af34c6aca5b9ce5c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:16:53 AM UTC  (today)

File size:
46.6 MB (48,839,024 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\winzip170-32.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/15/2012 5:00:00 PM

Valid to:
4/13/2014 4:59:59 PM

Subject:
CN=WinZip Computing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WinZip Computing, L=Mansfield, S=Connecticut, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5E4842AC9691630B45F8266C0ADB1206

File PE Metadata
Compilation timestamp:
11/2/2009 1:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:bMwuPGV5d0a6cTvm8cE2YF1crRj0E135lRGtIJiFcV67nO4DEe7lSVgwpFVzlPa3:bMtPGHqa6UwE3F1crRj0E/lAtH+VyOvY

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Entropy:
7.9997  (probably packed)

Code size:
144 KB (147,456 bytes)

The file winzip170-32.exe has been seen being distributed by the following 30 URLs.

http://filehippo.com/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NjcxMTE5MDtzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiIzNWNkNDM5NzU2ODNlOTZmYmU1NWFlNDI4MjhkNWVjNiI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ4Mjc4MjkwNDtzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiIzYzljY2MzNDEzYWM2NTJjMjVjZjU2YjBhNTAwY2E5MSI7fQ==

http://filehippo.com/download/file/.../

http://fs40.filehippo.com/7913/.../winzip170-32.exe

http://filehippo.com/download/file/.../

http://filehippo.com/pl/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1NTA3MTU0NztzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiI5NzRhODY1NDU2YzgxY2Y0NTJkNzZkMzBhZTk1OTkxYSI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NzI1ODA3NztzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiJjMjRjZGViNDI3NDBiMmFlMDdhOWZmMzBhOThhYmVjNCI7fQ==

http://filehippo.com/download/file/.../

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3NjEwNzIxMjtzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiI4YThjOTZlMjdmNTM2MTVlZGJiNmFlYTM5YzE2NTNmMCI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3Mjg5MTI1OTtzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiJmODU1MWJiNWE3NTZkY2IxOGVkYWVlNDljMGMyODc4MyI7fQ==

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ3MzY0MzMwMjtzOjI6ImlkIjtpOjE1ODc3O3M6NDoiZmlsZSI7czozNDoid2luemlwLTE3LTAtMTAzODEtd2luemlwMTcwLTMyLmV4ZSI7czozOiJ1cmwiO3M6NTE6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy93aW56aXAtMTctMC0xMDM4MSI7czo0OiJwYXNzIjtzOjMyOiIwMDM3NjNhMTZkZjNlZGMxNzEwNGRmNjBhOWY0MTMwMSI7fQ==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://10.233.233.233/data/index.php?dir=Others/Softwares/.../&file=winzip170-32.exe

Latest 30 of 30 download URLs

Scan winzip170-32.exe - Powered by Reason Core Security