» rankaware-win.exe
Overview
Analysis
File Details
Downloads (11)

rankaware-win.exe

Rankaware

SharpNight Co., Limited

This is a setup and installation application. The file has been seen being downloaded from en.softonic.com and multiple other hosts.

File name:

rankaware-win.exe

Publisher:

SharpNight Co,Ltd. (signed by SharpNight Co., Limited)

Product:

Rankaware

Description:

Rankaware Setup

MD5:

03418b9e2fb3e8ae156cb3b820ea902e

SHA-1:

32a769e9f367dd8224e99aea3171aafece1a7f9b

SHA-256:

3254830b1dba788c74260885f19585e80f3a2bfb049483fbb7db39c1e8c667c8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/30/2024 7:56:35 AM UTC (today)

File size:

5 MB (5,220,672 bytes)

Product version:

1.5.2

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\rankaware-win.exe

Digital Signature

Signed by:

SharpNight Co., Limited

Authority:

WoSign CA Limited

Valid from:

1/19/2016 11:00:52 AM

Valid to:

4/19/2019 11:00:52 AM

Subject:

CN="SharpNight Co., Limited", E=info@sharpnight.com, O="SharpNight Co., Limited", L=Hong Kong, S=Hong Kong, C=CN

Issuer:

CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:

658AA5BAA389249FEED00D4D30FA1167

File PE Metadata

Compilation timestamp:

7/16/2015 6:54:20 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:hSuXSxcB1MKVDW/ofM0rVUV8xURA0OjOes3VtuoiamW5TGS2VH/5PtUg:giUc5W/AUR3esltu8Jlt2f5PtUg

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86... 
[+]

Entropy:

7.9937

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file rankaware-win.exe has been seen being distributed by the following 11 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=RO&sid=2b6dfe67f3fc67115fe93f2aa1f9bbc8&upv=7f71503fed97cbc95b4c0d5d90a85c45&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583235EA59E4D9585DE1A175E18DA96BB49A483A78EBD8ECF6E7BE4F2E8C3AEC495B4E66E73F2D7552F1734572BC27C43D12CF1F0DEAE11BAE32E060BEA5E5F9CC5085F088E0076CE0FEA10C51483C65C7F0B2D5273DB5E7D009C7FA68CD08143B89CFB256B38897E6C6B31A57384957302&h=E5FF9567EE8DF9C3C343B11DBBB454A3DEFA9C0F4887E3E3BE8DED68F4EA242B&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=LS&sid=d6b312793ecd0652e1ac705fd562b307&upv=6858a430a313e17d6b4e12df03c5afba&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583235EA59E4D9585DE1A175E18DA96BB4954F753E5E7D255AD10C6112FC7877306DFAD7362FE328EF6545CD80B412D982D2CEAFFAD9A76A7697C6FD677052A29B669EE06D47386D39C39292BB5EFC077F47D999DD83ABE07147385C4262FAD7DE545A3CCAFABF90D988DF7B16974DB870C&h=35EF26B838D71965BE2A83F6557263AF88C599B1086EF16BD8C0D1568627BFBF&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=GR&sid=65b06f2b022f555fde06a831d2eab2d2&upv=9f4060c62a36e08bb21f1908c1495fba&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583B8C5C0549D2B7CF766AF722CD6AA73AFFF210FBD2B173795BA917FBB57BBF7F832D842DA087C0C13A9BD33F3AD408DA8E9AFD00D5C86A0C60BB1BD1CF036B888F655542EECDB80C8B7BD7CA8BC89BA6E76B2E95A90FD877679EF0C1271CF1543ED5A69F45A81CCD35B5C6FC05BCEAA5B&h=9309C8F2AC11A9C3AB5646C0B483E7ECDEB70D08F06D27C6531ECF86CEE73B51&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=LK&sid=c6060720cf6257c9c404466bf04ae86d&upv=db160cc03812284bb89579dfce081a90&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583B8C5C0549D2B7CF766AF722CD6AA73AF3EDBA48EB12CC94ABF0059DC58570A3EEBAB70AB02E3C6A08D3C18D399BB41A323EF3887830BC8B3935B65046C7C38F026DCEA9CB780B593A2C81F35A90EE6FB38B76544AE63CB8B8350BAA744A68CFF2829827EEF8984E082BFF5F5EA48EDDB&h=61F104FBE1E2F2D015FD2C594C5E236E8F0D740EFED04185F6C47D431875C329&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=CI&sid=4396dc5e898d16ae05db79d1643cba47&upv=35dd5e053322d6a0a3c6bcc84d9428e4&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583B8C5C0549D2B7CF766AF722CD6AA73AF7826F15BD38E08CBBE586B76FCD17D1CF294F99B913ADD367286747F752E2CA6A15D8EE5DB0C2A6BFCDDA933D8A7B1A1C935553EBC1A079292AA9925EE27AA64BF05748951A255CE60AB2204B28418600A0B45A4E3C4DBFFB57F9A048A1BF98B&h=7BC22065ECC43EA140F911359DD8591D9693407858E228AA0D26230101434C1F&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://rankaware-keyword-rank-checker.en.softonic.com/download

http://www.bitsdujour.com/.../chx=Gc4dq8

http://en.softonic.com/sads/tracker.php?ev=c&co=PK&sid=6a961d0485793555f4c4109f6a58ea47&upv=ef7c1a156995c847983d86ec7d6cfa85&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583B8C5C0549D2B7CF766AF722CD6AA73AFF2169A417208B935F729EB4C4E40D80EA065C13C2931A3C27F2AAE836F4509E7103E123CB66D4ED2D9916784C5E23EA9528D154FB6BC43B9D5B4C4A6E49A7DA9CE95F0391736D2F32B79959EFE4D822D7906F8E9CDC0B985BBA103A3F5657C99&h=B283731C7FE87EC53818B767AB267336C99079D9354DDA7659F24071B11434FE&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=DE&sid=4a415791867b95df048c64d94e1a40e2&upv=0bfdc3b95a95d1a577131fc593a8e2a2&z=results&sk=0&abp=1&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A6A42038A1E0B1465CB7A0FCB92CDC30E8A61C2B37F1CFEF37E75E2BF5CFB897C7750E73D7AD08C89C688A087E63836BB0CDA4D17A248F47742B2EEFA1B01AF0C60BA83D6C8D1973C44E37C388876A1501107BFC173461F79DA746000718A024363A9AD3FDA82EA2D22073781804CED369F20BC9D49D76C67B2E723B64679D95B72D854491D2DEA203BC5C2C7ABFD9E6A&h=84932B2B3AAAE56235FFC976338C8117B4662005E4733F65AD0DF1410F2B294D&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=ID&sid=f7189551235214252ee30cbcee85d7d5&upv=77e0e9c734aed4dc395c6c1b202caf94&z=download-cpd&sk=232&abp=0&params=F39B2A32BFC101987B1458170C278E031A872F37FCA34CAE6F173519F808D83A2DF8F7DDFF4FC50F2EC16308984176D8A5D7DA0C6DDE37136673515CE991A583B8C5C0549D2B7CF766AF722CD6AA73AF150E0B9AC2AB18F4908315865A35089579EA78DF2061C45DBDC7CFA76B6D88D9AFE7CD449015B65E195FEAE12434D6B80E2DEF238E9EABBC4B75D4623223E2711812552A240ACA8C4C7AAABE822877A7BD8496CEFE292DB079B99F12CE479759&h=B0AEF7B1B516FA39CAE160589D4613AC804B7BDA3145CC02936D22524BB7CE79&directdownload=1&f=69672623&d=http://myrankaware.com/.../rankaware-win.exe

Scan rankaware-win.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.