home

windscribe.exe

Windscribe Limited

This is a setup and installation application. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Publisher:
Windscribe   (signed by Windscribe Limited)

Product:
Windscribe

Description:
Windscribe Setup

MD5:
47a1f17200eb632dc779d73e3b6b8f58

SHA-1:
553fc97d43dc68fddf1ad022c43c7678fe2e0c9d

SHA-256:
5ef2db3fa3c9ff3b5df918d9b2cc880f48f75380a085eae230354c5d96b9c7f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:39:33 PM UTC  (today)

File size:
12.4 MB (13,004,064 bytes)

Product version:
1.56 build 3

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\windscribe.exe

Digital Signature
Signed by:
Windscribe Limited

Authority:
DigiCert Inc

Valid from:
11/19/2015 4:00:00 AM

Valid to:
1/22/2018 4:00:00 PM

Subject:
CN=Windscribe Limited, O=Windscribe Limited, L=Richmond Hill, S=Ontario, C=CA

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0E3E789D83E0D1FF57956CBE742D4397

File PE Metadata
Compilation timestamp:
7/16/2015 5:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:VUOio0brV2vHhwcpagDHmIdHiuj6FU4ZdIWbDuxhiPYs8kpfK8uql1:VU9bk6c8gDGIoC6FXrexeY4pfKq7

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9850

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file windscribe.exe has been seen being distributed by the following 17 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=ec77884615f2dc7a5e0168fee3abc345&upv=9a7244395089157cc9d9433c2a982e88&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B8CCCC8A04ADEC47629BA7DDCB5727FF45BA23408671F4AFCA548C7C24E50AFF44CBF15DD629C8B2C363A37D026130939CAB2C0A05A06AC995A56551E89F3A95C3423FA2DCD823E8E5ABA2362EE9C54B24D2C41860FB0F7ADBF25D76797D01B04EC57DD29F201DDCA3402A82CC4A74ECBE&h=27E252EC2BAE4EF283B69C4A40ED5615828D4D70419DBF866F2FCFF1B146451D&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=74ec21a0016721c301caf87251a52d35&upv=28c475a7aebc5fa9a74cbfdc49128bae&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DA456A5326E68B424D237D7EFB6125155CD759DA4C6E4B92BF38F1ABE1A9D127E9E7C581B04487C7B8E79A1BF95764BBEBCE2021FA4DAFD10096BDD3EB333F06EDAD74D3F5B27E84609914DC65E3259CC&h=E69AA03F4D6C79BB6D5D43A1B6B2F08FAD5C377E3B2FEF613C4E88B54DED84CF&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=IN&sid=286a9d90231611b4e3700b2ac4cfef99&upv=21b8d0f4fbe5e446fca87e1f75b3df3a&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2FC6B65E019B2AC7F15F31C39D54C732F79B09917191D4A76F2101D1BCFECB940DFCE9E1BF3EC8B972A1873E66E73FCCD217566FAEDA2CF3E63A73F8AE7D9E7C0B4342C6C6E0C35AB85389792DC1CE6223E3B9BCA5DF4FC11F1CF570A857711E9E466E6A5EF65FE9FDD91E56CC7D61D9D6&h=FE32CA8AE1366B902E29F988AD4CED3BC32B7B52FD5E9B3FE84AE315D0FD8E64&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=fbb418610cc3c3f7eb6a2069d1723f4e&upv=dd97fd6c15a2da1eb21324c9eb0c591b&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B8A0964DC88118E0495062E04BD3F05763E7D7D38D494BC46D12E3DC6784D750C1B6128A36EC226364FE0ADD7D0A1AD760CE547EB427146864A55B17C0DC68D5239A95B472D1200E805B8E47A79E5433A71DCE98E63FE54105B8AF478F114F033B86CF8B6ACE0D19C4BC347037D58F71A4&h=A3F0247D547EE3384E5832C79978A530572BD9598C43AB13C1CDD7D21783317F&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=c13f4440fc62cfd6954f655fc2afdc1d&upv=bf596e865766214150b9e89bf3224f4e&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DF1E1AA85D09BB511AB8EFA1FDC0792D847614552660E767B5E283C40B8B97A5482234CAFC7561D9CF665A46A528820776A5AFDED5A547088D5B805BE7881ECB63ABFE68E02E99C8CAE7F34571E8F9C7E&h=4AFE36BC56F8C08C4590D0996D77649AB1F3C92FA3EC4CF30FF9FE144DFD908C&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=bc0b6786f143a897bba8ceccd6593e67&upv=b8a0b61893b6d5eaca5a51084ad980d3&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D4ABEF1BC1B84F754FE591A78F2DE4BE34BF7547EC9FC06B85DE1F41FF8908B9AEB491775F560D288E7F91555442A2F5999380BB3D2B6FB658F7395C0CA81A1400AF90AF6D37BF34D739EA0E343B8D6EE&h=CD6C9D79B0C9130AC6A8B44AE4BDD7F4AFA1B0196417CE428980F7B980D3D97F&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=14b81e2e9ada46e1ea39427df817877a&upv=70c6a258e695966cd7e13a0b7a31f79f&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DF19726063E754CD2353183748B8AB191E99D3400CD271EA83B7FF56BDE1F396A1F783F89C8FA84E1B3B895AAEA5F86966B9BA79700821331B899896D985F16BABB6E055BCB84BCB4E9E49E32C81EA5C7&h=7D897ABC46AFF0FB347BB779B0144FF96AAB5AB4830CFDD5144D0B8B6A912B66&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=46343c16032dc1c8964c2cf59a191e55&upv=7fd3b18eb4e79d35090e500a22c85089&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D3597CADBA135E155AF56B7C6ACABB85E61A34BBFA9A2E85C2F178A96A881917356446B1CB52CB2F75F8FE1A6D0F9A02942D1C43671A7FF3051C669F7D15571FDA663932A9E2F333570B2B04DCC7292A7&h=EFCB1AF5DCC4FF8E47FBD054EAA034B6599200801B4B4095FAC1FC749EB1CD1C&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=e548cae66ff225a8f11ad756bc959436&upv=28cadbae7562aba1d233092103b2e74f&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DE87537FB6F207759A125F31685463BDF34ED7894E7EE4AA6EFF6F111489FC59F11BF27630984C306EA0BBC671B0387078B48C89F7E2CFC1C7450391B71FD86B564365F6187248A896B5F60898569622D&h=52887FC692D8D2056C9678907026C67B1CE6402499CC702EB5F57B696C4422EA&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=RO&sid=a8c9cc9ee8f19412de91854ea896cd80&upv=367b3d3ce4f636ca649602d244ea862c&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DA55CFB4BFFC0DE8741B1A4E617E575457DCCDFEAF892B8978E800E7D2DA3C87C95DFBE0ADA5B52FAEA97AB08F2EE675FC9E8CA328F17EFBB681BC564A627E31E93396109B2F84A2188F132E09A070B12&h=87A750F5285D73A9278B9D2E05E4C9BDD8B9DB8C5BC2F184C433F0C570F6B637&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

https://windscribe.com/install/.../windows

http://www.jetelecharge.com/.../tel.php?id=8591

https://windscribe.com/.../desktop

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=5a09525923568eacd135b682a8a5237e&upv=429c1b9bcfcf5e3ddbdcad69a8c27f91&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DFB851D908C5B09C4A13485574CB95FA46586AB27DCB8D58F011A91B8A5B924A8A405CC9108140A2A1D6602D304E6C6FBF77F2B8C48920E5EEE955C69F96D4BCD6D7F5D2B502FF6E1E62A3486C9A2C2DB&h=4C3746740B8342DE5DEA55372399F95455A7928BA80C74AC714AAC810666E8E1&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=4063ed9d1626510cc3ffd40de2636d1e&upv=8b869072d44ec8d77725a8374c9757ef&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D5079519FC32271D06C3C46AB1C3AD5E533A2946D0F8625E255952674C8BD4108FC747BB1792E13C7F8E72921E55B7D07E94D646688DC990FDF0562EEC7954F75C64DF5F62E207D09105B43A369BD8EB2&h=8725AE0D3F0E3F1CC29B93AA8B7818230B6B35346B3EB6C360344C1DE711A349&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=cf677cf700c5b54618e6224023406210&upv=b4b614f58f3d71ef7b9defa1ff344695&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B888D102F105E2D3D249B4135F10CC646077955892C58E4D909DF29CBBFBA333961AEE838012091B949F85608D6EF42CCB0C055D05B84F6065DE71E55B2B82393B3EDEF1FB5589CED57372D2768359A33752F64EBBE421513DCC83DA3DF211A37E3B222ECBAFEC353B736AFDF5BD2BBC81&h=C3FEC6857D41533AAE751895AF435196BB754FA139D71B6C1A59559A3F5EFC09&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

Scan windscribe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.