home

winzip20-softonic.exe

WinZip

WinZip Computing, S.L.

Publisher:
WinZip Computing, S.L.

Product:
WinZip

Version:
1.0.220.1

MD5:
955d73d538edd5d2617da300c3840a8e

SHA-1:
4d1af225540e46b8c58a63b96d154545e22393ea

SHA-256:
348404c50f7623e4f1c91cd8288799ca7863f939f0ca8ac9587c98a63fc0dc54

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 5:04:26 PM UTC  (today)

File size:
757.5 KB (775,656 bytes)

Product version:
1.0.220.1

Copyright:
WinZip Computing

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\winzip20-softonic.exe

File PE Metadata
Compilation timestamp:
12/28/2015 7:28:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:uzvZkpxJWKe7rHkj+bF/pkS7d9PuaIYNVbrzWLDcX2oQB/LaIRNNEF8yqx4vRjXs:y4e7rHj0S7TFprzWEIEF8y9ZjEf

Entry address:
0x373EE

Entry point:
60, D0, C7, 8D, 0D, 3E, C2, 8D, 3A, 0F, AF, C9, F3, C0, D3, 4B, FF, CB, 8A, EE, 0F, AB, FE, 19, DE, EB, 04, 0F, BA, EB, E9, 8A, DB, 08, DD, F7, D6, 3B, C7, F6, D5, 69, D9, 73, A3, E8, ED, 68, CD, 0E, C7, 00, 21, D0, D1, D3, FF, CE, FE, C2, 0F, A3, F6, F7, DD, 0F, A3, C7, E8, 1A, 00, 00, 00, D1, C0, 81, CB, 93, 98, FE, 77, 0F, BA, F8, 3A, 8A, C7, 8B, C5, 69, C8, F6, 50, E0, B4, 85, F7, 3B, F5, 69, DA, 89, 1F, EA, 8F, C7, C2, 81, 53, 59, 75, 86, F5, F3, 69, C0, FC, 75, 96, 15, 0F, B3, FB, 87, ED, 0F, C8, 85...
 
[+]

Entropy:
7.2695

Code size:
353.5 KB (361,984 bytes)

The file winzip20-softonic.exe has been seen being distributed by the following URL.

http://winzip.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANI0jFJOXFWHsYqkgKBsD4OZr9unOrm0Vz0CTbU3RL6hhpJu47k1cYXTnQe9W2AvT7K3bqcdCC2hA9 btIcEV2AYggO7p031xg3YWQWJmrXBJOdN 5tB5UaROeFmhBKHtY=

Scan winzip20-softonic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.