home

windscribe.exe

Windscribe Limited

This is a setup and installation application. The file has been seen being downloaded from windscribe.com and multiple other hosts.
Publisher:
Windscribe   (signed by Windscribe Limited)

Product:
Windscribe

Description:
Windscribe Setup

MD5:
b5e167a42dea0c19eb5eab1bc3232421

SHA-1:
4865a9f60b9054c7d75e5e7a27a8f97cb98f2ce9

SHA-256:
2ce3092f6ae9d86f6ee4c8c9ddcd45a94f35460c9bc10502bdde32fd1de46eee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:44:12 PM UTC  (today)

File size:
12.7 MB (13,273,680 bytes)

Product version:
1.59 build 8

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\windscribe.exe

Digital Signature
Signed by:
Windscribe Limited

Authority:
DigiCert Inc

Valid from:
11/19/2015 1:00:00 AM

Valid to:
1/22/2018 1:00:00 PM

Subject:
CN=Windscribe Limited, O=Windscribe Limited, L=Richmond Hill, S=Ontario, C=CA

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0E3E789D83E0D1FF57956CBE742D4397

File PE Metadata
Compilation timestamp:
7/16/2015 3:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:JU4q4oJkjLRmZfu4UWE/5mUQJgSTszydz:JUsoJkLRqLE/5DCxIkz

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file windscribe.exe has been seen being distributed by the following 5 URLs.

https://windscribe.com/.../desktop

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=4d519d803dbbba075fa3aac9caa949f8&upv=d7e1cca4413f997854faa70e633deea7&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B8A0964DC88118E0495062E04BD3F05763E7D7D38D494BC46D12E3DC6784D750C13560DB8DE383B9B8FBC9CB19802636A51FB1DC6C30630AC0C31E42D38A0E042EC57F6C54DA9A6D53DB41A3498E7AED4388DEDD09D69FA3F3BAA05D493BC3C2D537A3F9209300B61A73A91D2CD1940612&h=1F72296B5803451A1AFF667F600FDF0FA70D9AD5CEB420BF4CD83B3732B7569B&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=59f1de6f54f9316897158aa0fc01ae56&upv=6653bdd03715eec9cbef4fc6695f21c2&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D7F3DF55E956BF7797BF6E74136B8A63F84A82F796FDB379D4407440FD79D6B9F8BE00A7158D02EA1C15490420C15068702D47CD699A944A452F0FF592A627B5EF8CFB4011B3CDD0722D64ECD30139309&h=CDC5E940D660AAC7FA04B197F2E5BC3447D2BF4EF0AB87FA8B6C25F898515F6D&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=9c33e28b6486ea3c67ebf8c6777cef3b&upv=fac5edc22b531eebd200a2e189a357f3&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D2CFCD5D416F92B329C058A7550BE4E96231FAC12E43507FB1676D8096A09B30C8AD9953EEAA0BECF4E4F88E7BFDB242B90CAEEC625FEAA7B526549414B3CC05A0C73A10493ECB5C835FF1BD4CC12E6E4&h=D689216333C4E5F80E2666D8A8F694D5613241EFABF073865CE1DF740839D6ED&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

https://assets.windscribe.com/desktop/.../Windscribe.exe

Scan windscribe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.