home

arw7.exe

NowSmart Limited

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Publisher:
NowSmart Limited  (signed and verified)

MD5:
3186c5d7fa72a48ac7267592063f5fe2

SHA-1:
11a94e1b9237bae81e106c6be57fe0f231ab0fd2

SHA-256:
3cdb6a22a86aa88a414d0b0c56639e9530600da3a428c89cfc7f81265e3764d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 12:36:22 PM UTC  (today)

File size:
3.9 MB (4,117,608 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\arw7.exe

Digital Signature
Signed by:
NowSmart Limited

Authority:
WoSign CA Limited

Valid from:
3/6/2014 6:44:38 AM

Valid to:
3/5/2017 6:44:38 AM

Subject:
CN=NowSmart Limited, E=support@nowsmart.com, O=NowSmart Limited, L=Hong Kong, S=Hong Kong, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
3F332A803863755A14B4F60395561DBE

File PE Metadata
Compilation timestamp:
12/5/2009 7:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:sXk+5wJdBBhKk1t7ajUvWWxJWfv2ScZ6q5IQE7X+GMP7TWe:qk+AdbhKwF762ScZ6SA67T3

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file arw7.exe has been seen being distributed by the following 41 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=PT&sid=4fb806cca4944d9dc6feb7d13408adfc&upv=c22e98b11df0dbaee19ec50a0f5db4ec&z=pp_warning&sk=601&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B57002110B126DEB03285D744D5A8CB6B3FA5D2068C472EE8B0237F78D4D3356B88F324D03BD18BBA050CBF4F50F5A4A194538BB0DB961423E940C09F27D4509B5338294D981E6AAB8CCC9908FE6D4D84C578ECA6872DE84BF74BCC620A729AEA&h=E49B7EF0CBF9BF83B16DA22E17FA56A1A13ABCE922C028E93622288DDCF8A103&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://filehippo.com/download/file/.../

http://en.softonic.com/sads/tracker.php?ev=c&co=EG&sid=f3e6f78c4600e6b29809e89ec421d36e&upv=6c9fa7a7ab9daf39a4d76c8f90307e12&z=list&sk=587&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E0F9833ABF11C6BB284D9DC8A5A115C73C93759A46C6083E6B8276378135A5192A7BAAC0CCDF88535C51F898EEBA1022BA1F12B9A27B55B764177E42A72176B099E6AA5945DC80BD495B47AFDF74271AE1F1AED46D5E59A33872A1EBBBBB0F44C&h=1FCEA0D2EA0F65A0E7F601B09BBDEAC0BE86C3C68817D45AEF5CA9238A99037A&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=HK&sid=296c0cb814cae90d9431a35dbdfe6331&upv=075b902a06f72b14ec5c3b17dd4a95dd&z=download-cpd&sk=592&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E1C9026D47E128E041A9BCC4BE07348DF50D1AC4E76911D15EB9186EF5B86DA2E75884FA9509B33696395B20B7746FAE973CA1537B022851421368EAD1784F92F985C631A21BB1D6685AC5193E79664CFD7FA065B9F57F17C5202AA4ECD5D4D7F&h=AE5080C048B2E2BA66869CFCCABEDFE29F882AB2CEC6C2F2C78C513642D877B0&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://filehippo.com/download/file/.../

http://audio-record-wizard.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../NLaIQE5Lc6XZWzSeunx0dRLEsbCAAPUFKX5rzVkwqSxCOYBH18ahdm5EenQCvsjPLUg=

https://sites.fastspring.com/nowsmart/order/.../NOW160515-1438-56123F

http://audio-recording-wizard.software.informer.com/.../

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=2d3c8a0a9d12d3a7ab2d4089e7a45227&upv=000e981bc96d74025871f8f8a3ae2673&z=pp_warning&sk=601&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B57002110B126DEB03285D744D5A8CB6B88FCD949E5ECDF4A131ED7FC23617556DF36DEEB38E9F558C753BEE5D40BDEE440EDF43C3BFA77B444BE9ED628401DD61823B3D2F2013715DA28C3DB08890D7A092AA23DBB097EF56BB2E0F88728887E&h=D0BC16D8CAE739B85491741BAA5500C3904AC1DB883EEBA55676EBACBC0D55F4&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=HK&sid=6467d85ed6eaa7d3a7d48a2336846dda&upv=35c5c79d1cb0263fd68803e7895b3569&z=download-cpd&sk=600&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E1C9026D47E128E041A9BCC4BE07348DFEA14B43FDDFD5425E48931F19B3B445410BB5384688E3FC738A3DE9CEDD0EB11D11F2BA11D230E9C542FEEDDFA405DC87BF3D5B59B83E23184FC594360F7A84A06B2179A7261512D3BFD2EF52527A359&h=06320D139F75E4C1241B946C5CD52E7348598BFAE2AD26BF0C470B175FCE6C9E&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

&onid=2170&oid=3001-2170_4-10105735&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=mp3audio/audio&topicbrcrm=&pid=14486363&mfgid=81032&merid=81032&ctype=dm&cval=NONE&devicetype=desktop&pguid=f29934b3683271ada1476a3f&viewguid=aHEUYqBWfbq6UZCNwl3LEganOWmP1JFdFcM1&destUrl=http://files.downloadnow.com/s/software/14/48/.../63/arw7cnet.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BE&sid=48e66cbd7a0d4847311be994aff9141e&upv=5a7c7e7e368229b32bd25e3db4ffc70d&z=pp_alternative&sk=601&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B57002110B126DEB03285D744D5A8CB6B340632C537631A24CE667802348FF204AD7CC72CAC3C7CE71CC771A1C6786800C214079E975A94F51385CBB4803B9922CFBF02A29963C89B28481699DBED2CCBCEB3FAA126BCCF6ED3241E975D90F06A&h=8BC4700EC87B036CD15EB6D2DB237E17B3CB8B7B40E6C7795C2E6E7484A620CD&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RO&sid=c4bc70b583c7cf3a4a8e397f7b7493c2&upv=ab7f1c4cf481f4e9a006fe69d13658ff&z=download-cpd&sk=592&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E0F9833ABF11C6BB284D9DC8A5A115C73EC43EB28C1421AAAC1655436761AA8AF40F9A09DD31216976CAFE4F9034553E2B82B1F1F45BBD485AC6939BEB2661E0241E606565B6FB3BF6100E878364C7B42FDA3E1A799466DA5D8C53801870CC71D&h=0D90D3950C93CEABA5A0FD2DEE1FDF8E5BB09AF01A263695E39AE6A0A8F122B2&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=CA&sid=9a852a7352ac1387f41d33c013fd3f19&upv=ce56923c73572f9f36e3f7a6c4a4e396&z=pp_alternative&sk=601&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B1D944ED40A779D77BCC2BFE62AC5C07152B36352C4C901008498249B338B9A5BB04A8F5EED996767E911D0ECC0EF60B75BF4548E3F114FA4DF425C774A0335399FF0B13D9CB960DAEBFDCEEA4E302B0143A80D4CF7A926884B382D3FE634C69B&h=2987AF1F6EBAE8B2329A200A11A0AB2DFF836B84C9B9A3274610AA1C8BD5DDB3&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RS&sid=1c6530b3aa8359f071eaa8c9da725d72&upv=6d3273c7a88519bb404821fcdae25e92&z=download-cpd&sk=614&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E0F9833ABF11C6BB284D9DC8A5A115C736709F81977315E914D5B7E7CF450B9ABB6177BB1D829E77EFD7B6D56106F0CD89FB907F9AA78BC759B19923E9A5B3C2B92C2E3E768846DE1B7513DD3E9BD8BCB71FE877604DDF7912314D42F10B1E02C&h=8E1337881D84120E2B503614A385E40A7F2878BAAA9310F4535C855888D6A2E0&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=b94563ecf0846c19add9e60533fcf782&upv=5841784bb5a8c33235c6fa0b85f37e63&z=download-cpd&sk=604&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E0F9833ABF11C6BB284D9DC8A5A115C7335EAA5B2A835A187E2D7F04935DD40CE44D7B949C40427FDD8E66C5C0E19725CA8555E8D758E9237353BEADC58A1BFEF5D50B4D81CC0F546A967EAF13337E18856928F902B8E60217FE029EA88E66AB1&h=C4E43DE9AF108656B0AA3A8645490AEFDC81D7011D1BCE7818D291349A0F0DE2&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=99d15dee108b869c6a60c3e5d5c09954&upv=0ecb5f3b5c75009bf48433cd95f7d178&z=list&sk=595&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E8AD5D1BBC2D2A2A7693753721668853D8ADB0DD8015042C8E718FCEB74926017443A2F9F558D8658A36490C34596D35969878CA1417966A975475B59D3CB811DB430F6F37B5A4A4F495B167035C6ADCFB04791FE00A95B8884838C4AF0E3C901&h=6AF11F31CC1E29E6286D3467A6427FFC6197D85595BB2DC4325B2A57D7CAC296&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://www.bitsdujour.com/.../chx=QNl8sV

http://en.softonic.com/sads/tracker.php?ev=c&co=PH&sid=6e8aebc56cf62bdd7ec511bb27097b72&upv=a217553a5b279694a1396e9ef65c369a&z=download-cpd&sk=592&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E7408B2274A754F08E245D23938116DDD00D456D20ED8BBF1659EBA66A1E1F744729FF10F7DEBC5CF1B35404B3FB395E51031784EADA9716FACBC6510C9497DF5A4025F85FBE9EE2F6C96DFEE67BAE7805A7C2B6FD4AA82AB584D9AFE156E0555&h=A82FB2E7FFBD90E5EBA73B576853A548C5755A48A04AA256D835581F8286D5D3&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MA&sid=71c20347f4f5b1c3cfdcbe89d9cb7086&upv=4b098d7192ce94d9a4f5b505b04daf4b&z=download-cpd&sk=606&abp=1&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E0F9833ABF11C6BB284D9DC8A5A115C73F9B8B4FB8337C1EED8D5D96E0E10FBAACA70ECE06F92C59C67260C2C8867202740216E453373D25C26146128089C1212680AC94A93AFE7C82EA2EAE6B71647F1FB57E269A3D3D19CCC85D4D66602DD15&h=93A5B2D39687F2A0B183FCDDC9A390E733D1AEF69D92F9ACE535BB0FEABA2FA2&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=MA&sid=7e49572b22923391c61ae2815e866e8b&upv=ec600cf09500cf250b306a0bbb6fa820&z=download-cpd&sk=593&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E1C9026D47E128E041A9BCC4BE07348DFDC259E036B3AEF3CA265BE60F29A4E207D2384358E4706FBC4A33B5D68463E7BC1E953BA20D0EF0C7FC8511A8B398D1E8166BB215199DFAA3422AC942E832E94BE3B6B8CF321C07E014A2F778B375F7D&h=385E45EF7A49568ACF66FD784559CCD2C98BBB2757491D5E1F17EFC8E3890838&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=TH&sid=ffe5346b93838b125f51483a7ebde9bb&upv=5011143dc213b64e640e90d6fa62b780&z=download-cpd&sk=600&abp=1&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E8AD5D1BBC2D2A2A7693753721668853DCD87ED52E827BA86482B7C23E75881AF847F9EE9E0DCBE8BB6D2E65A1C646FFD83A7070946C8C87EE39C95ABF1BAE5974C9E00814C550D06E59B95786BF6CFA8B37AAB7D98E230B666E0FAB182581180&h=EC67F83F831E49686D1604F0A50BD31C07B59AF6964FF1EE98EBFCDCE01FE79D&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=0e31d6cf7e07a9f3c2fc1fbd34aee636&upv=3cd14c91d959c2c45fb3a088733272df&z=list&sk=615&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E8AD5D1BBC2D2A2A7693753721668853DCCFCA93844E4AF8A8D61A55B93DF40E7981C826AA2C01F6955EF929C23D4E4B7A6E350160CF7258867ED859492C5D4D10CEC3D034F75CA5F50B31AC45B7CB031E4CBE4D972A319590FFD13EBFD437262&h=FFAE612EBA8D6F6E21B30B47DD8733F9E27A30BE673F1C9AD838F37704DB44FD&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://www.nowsmart.com/.../arw7site.exe

http://filehippo.com/download/file/.../

http://en.softonic.com/sads/tracker.php?ev=c&co=PL&sid=87178a9d13a54c98ac7d0ee6da95406c&upv=0e080514785370cc790ab60ae2e694ed&z=download-cpd&sk=594&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E2AEE38351009EA9A23808D78A28C50B63EE1CA18B05C5AC55872179FA08B14009ABD4C9DFE2E42B7D62486A5296B9E8F7CE955D7ED83CC258002F0A4FD6547AA2838CB7D8C5114296587F07DB3998A87F76C7609AD657A0F2D94217894A491F5&h=0EC40E4A11C147A89419CDD95F386696CD200A1A6273A26E7959176A386F8C33&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=VN&sid=77c511d5edb8279bc9d5ff30d578f3de&upv=cbe72af66c9067f8319f58e3750b6921&z=download-cpd&sk=600&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D878A3C936531282EE45F922735E2AED24E8AD5D1BBC2D2A2A7693753721668853DF90032FEB590B9B61F6DF1792CA7F1EFB44DCD8B076D9098837AB3589B4D8F36D8B10FF2CCD215D405EBC00C386BB6F415F82271DD0437D84C5E8DD91318915ABDDA63BE998009B449BF97BA921AE898&h=6C3C2C44FF2994981370EF55AF5D5AA19F0ABF0C8F58F6B9DFC7A9D37F89E481&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://www.nowsmart.com/.../arw7inst.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=CA&sid=1affa82b578054ad66d94b01055313c7&upv=57368b7d0cae22b874b4777e9dafc944&z=pp_alternative&sk=601&abp=1&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B1D944ED40A779D77BCC2BFE62AC5C071D5ACE1C6B15BB9E414574D1C0DA1EA09575F9113B676325B7C5EDB16D5C18D529B5BDEE2D4CE2381BF781BE7C1909DD74E6839F4C00957779634FD0A672A714B404DF517AEDAD8854A97D03C868337AF&h=36F8E52DE4A7BBDBF53C51960D914E7890EC5FA1A179E203BBB79B74E71F33A9&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RO&sid=e49af0f6c866fbd784aba71db7912299&upv=cc35718820bcb32d4d27f0add01dde74&z=list&sk=601&abp=0&params=F39B2A32BFC101987B1458170C278E039F76501CF908B2FADC82EF658A92784E15C486C1ED819EEABC3E876C18416D874D28A6609D1706A40C8416C10B00A94B5A96FB7FC88D98BAD49CDB19B863F159869F437BF6EEB71D37DE9925A03A8F2203FA1A4DEF263F4DA387D091E4F03572A9F1979B2DC2E4EB8727B63710AACE0059A2BD107609544D84C6B12B7A7B22DE54AAF773A4B95E3EC61F77DF1DFCC81C&h=35203DEEEA9F68B5DCA773D2A8EDF0C5F796335806378FDD9C47D85C51E523CF&directdownload=1&f=331745&d=http://www.nowsmart.com/.../arw7site.exe

Latest 30 of 41 download URLs

Scan arw7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.