home

drw_free.exe

EaseUS Data Recovery Wizard

CHENGDU YIWO Tech Development Co., Ltd.

This is a self-extracting archive and installer. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
EaseUS   (signed by CHENGDU YIWO Tech Development Co., Ltd.)

Product:
EaseUS Data Recovery Wizard

Description:
EaseUS Data Recovery Wizard Setup

MD5:
64bc98a9d68656f7c0dceb33b507eba9

SHA-1:
0f87ff19ec820d7f82f2fcea601dd4d301cee5e6

SHA-256:
211b0e4f7cf47d8a50ebb61697094cd09abbd42076226a7f4da6cc8c6db5be7c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 5:10:00 PM UTC  (today)

File size:
14.2 MB (14,846,832 bytes)

Copyright:
Copyright (c) 2004-2016 EaseUS.ALL RIGHTS RESERVED.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\drw_free.exe

Digital Signature
Signed by:
CHENGDU YIWO Tech Development Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
9/3/2014 2:00:00 AM

Valid to:
10/3/2017 1:59:59 AM

Subject:
CN="CHENGDU YIWO Tech Development Co., Ltd.", OU=IT, O="CHENGDU YIWO Tech Development Co., Ltd.", L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7F86B44C3EFB81FAC8C8B67058054F6A

File PE Metadata
Compilation timestamp:
1/15/2016 9:22:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:EJraxHUxYNlYfYQn5WaPIWbd70FnfJK5SD4I9GjyM:EJri0K4fXYYd70lfMc9G2M

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file drw_free.exe has been seen being distributed by the following 13 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=3c78ebb91b1cb620589e2f3df4a87d30&upv=b7998fed345be1d6105e9d47703e3774&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79FA3EC3391FD96E8AEF6F7627D984D1F74D7D7B1683442E101AFF6B6AC69FA8BB390BADA2BBEC377346DDC892D6132C7B1086CB71087541A5AF65E3B9BAB733359E2D4EC294DFCA0B573CA301DBDDD9B4AC2EB45ED4D3023AD87047E540456DAE813DE98D7083DB2E80430240A92F77CAB910D4EE64A4D7CBD29F12528BA07AE25&h=41CEAC660E48A4F01489DBE07A411F7C4B7C583FB3593100B88E3C549474300D&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

temp:drw_free.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=980cfc5305b007626c2eeabec50e65f9&upv=31438d4029c20e29286b22196b7d312a&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79FA3EC3391FD96E8AEF6F7627D984D1F74B3C9C83C4C90508635F9BC6C2F99C4FCF3ECF8EC9BC489B737FDE29843FDF1D57F436C396551C85D1B5A2BFA1E8D83BF847765AC612151FDCF9BB056B8F697A3D36302DD1486E94998229DF3F122363BA96CA897BB54731B841CD421DC58D432400D3E3C300E45505D6CA37D77AFFF42&h=494ADC8BFF2B9CE5C6FBE5CE465A13EC293D801A8DDB71937679B0ECDC7AA3C0&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://easeus-data-recovery-wizard-free-edition.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuZIFnoHcEI7f5JH/.../Kn4LpPT9a5u6mEqF0K32a5DtZrSM58a6AOChmtmC4=

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=683fb81fcc83ece6245bdbd7fa733982&upv=1bb93d098c89417ea319aafb56323271&z=pp_warning&sk=3275&abp=1&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F23184B81B418763CBEE77BCA5F03D84C643BA7547B31165113F57759ADC03E8A897AA08FBFE935D9AF197AEE4C6E265A6CF733F9310ADCF0C3E531C9292D07C5E37D9A8DA205237C2D972FFFDFDAE5A9F7C2A87C3C7D1B43F0F40F6CAFE42FE49377A10114F1FDE053779F49C7E428FA69DF82FFF5125DF35685F1AD402A7EF819ADC4F6F82F5BED0FC3620A6C8F82C3E&h=8DC91EE9E353BA7166DC98CFCBFFC1E3664F9F888F5298BB56E38E77EBBF6489&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=7273defa685dbcfbcd42b9d6c5cf6fe3&upv=3da37b7f60f3a03f8f5b270d367ee376&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79FA6FEC66B48AD16292DEB5A747C315F3ABFFB34B59EB1F024BB6A3D12772437E07054ECE0CF80223F50FB232818CA503A98A83A66B02A78A748BAD83976ACAB7261621C3CCD4BFB1BB9E75277E205F80CD0037F9C9120755C9B14C3160B4E584E0FCBA9DBCE2C52DE3AE30C24007AC38DDBC831DEB9FD5E4646169CB3E5FD1684&h=4059F793A31B2099FB2FFD7A12E6428E12F32EAF6AD9634EC60FFAE2F2F48202&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://easeus-data-recovery-wizard-free-edition.softonic.com/descargar

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=8b69e27f7b5225836261a218c4a43dca&upv=d4daa2570305b632cb04ee4a8db5e642&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79F3B0D182AB81ECA9CEAC5C14F3A41EE4D3958648ED2EB1C6BB9098E866B31354238C2173D91BC63AD6CD5FC337E859F56EA031813C81194FB8E3B33990227EE31BF8C1602E4FE520979600036046968C213284827A886BF3B705D7A02FE63D0F124FD6903340FA0ADFAB3333C0BEDE087B56E650DD72964ADEB22349D2B2D4B16&h=7A45102AC5045A6A189F145CA26CD8484C10B1EB838E7C8A772284C95F8568A5&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=b00881cfadd0c6ee4096f075ec3683c1&upv=486af67eb52ab7c66808830234fcd9a3&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79F90EFFDD8912204765320FC476815D481BBB1DE9DBA583EB75263CFC1FEA5E5E7157990289E69A2944FC9A52F9FF61208F9483A06142182106B3BBE027E389BA8F3A9F6C42545B25E3EBCA697CE22AEB5786AE2E5493B37829A4BA72B3B01DBA3BC0BAB12BBF32C77850E5A4CEB6ABDED19BBC5E4DCD7D39649FB60825D995561&h=B9204AADE4985664CB0C8D8CF04956EF867CF28578B31FD6B0ACE8BF685A6DBD&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=23d672e78ac1be58df732bb09bfac1f9&upv=d65ef911f83f82ab900b957bdc04dab6&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79FC271C6999CF7C4F5EF02D2B4C1DE6F81AD3155C85E3D73A94CB34F27EA81EB5DDE8F0645574F2F316A40A6F71C4B652DB16434DE279DFE7E6F46DD74BDC612ECE5224093D1F0B6E41C3D6F84DDDAFC78D02B45EFA662735B12CBF3C6413F30514BB2111739329717D6DAB6991CBD94A692149D8A8872E3144E10BB5B90082FD9&h=ABB7A2DD77431BD7232FDC52A79DAD059F3AAE1765A9D2FD0CCAFA88CA83BC4C&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=aed9dc0c3de8f16f6cbf02920ea53056&upv=e99c596890b214e4d215aa00d35f4fcf&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2663862BADAACEE7385CBDECAB41BC79F283D8910BB8CD2E63826EE838EFAD9E9C028C14734D0CE3FB68A68593071F19F8E535C440AAFD0EF4CDCED5852F003E10D5C2C3325F1BBE82CEE7FB2B46089806AD24BABC6675BDE128EE2075280F4FAA5E8CD6E1ED98E056F9FF455201E0D6887CC39633F5A845587AA12139094ECC9BB6A7E7BFE9F824AFC6CC8AC310B660E&h=EC3F6CB4DA2A5DD06A5281423CBC3009C5830A9F318AB3CDB9960AFC0691B4B0&directdownload=1&f=69653652&d=http://download.easeus.com/.../drw_free.exe

http://software.thaiware.com/download_url.php?id=76

http://download.easeus.com/.../drw_free.exe

Scan drw_free.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.