home

windscribe.exe

Windscribe Limited

This is a setup and installation application. The file has been seen being downloaded from en.softonic.com and multiple other hosts.
Publisher:
Windscribe   (signed by Windscribe Limited)

Product:
Windscribe

Description:
Windscribe Setup

MD5:
0e7323210511ddb5e4e51fc41754f6d0

SHA-1:
d0a08afc70b089c491fafa376d96afa9a39869db

SHA-256:
e81a66156fbd0b09db0a37c539a611d6f7b65b55e684d5cf5633ba90676eba71

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:56:18 PM UTC  (today)

File size:
13.2 MB (13,816,824 bytes)

Product version:
1.58 build 3

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\windscribe.exe

Digital Signature
Signed by:
Windscribe Limited

Authority:
DigiCert Inc

Valid from:
11/18/2015 4:00:00 PM

Valid to:
1/22/2018 4:00:00 AM

Subject:
CN=Windscribe Limited, O=Windscribe Limited, L=Richmond Hill, S=Ontario, C=CA

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0E3E789D83E0D1FF57956CBE742D4397

File PE Metadata
Compilation timestamp:
7/16/2015 6:24:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:sUiio0brV/F5mhUrRjrm6+bQCY4/WvszdnC4R5FlWcCBPN7UnFMhpNRr7uNuta42:sUpb756Uro6Al0sRnftlWaF0yL

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.9864

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file windscribe.exe has been seen being distributed by the following 15 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=SD&sid=059a3a15ccf0dd19c17a5c8bba1e3ac9&upv=a76b4926fc6e096726778fecc9103f5e&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DB17BF6B0E1BAA166A5B7FB256C8A8AE819BD61A76E6B861B62F25EE334E1D300C49E8A1D0A6E03F3DF6D013B11F2C152C08414EFBED1909320DBB41C551BA8435EDB7F2F0CB873C7EB205042DF026574&h=E0A7DEF709FAABFE88B1BBCE0A73ECB9A51D7BEA7E75A54C4F32CF01A992E73D&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=NG&sid=7f35dd23241abbdb2cc76205d6d34835&upv=4d38d488bfb2e54903957c72bc8eec42&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DC8C0BA6615BC45409BAAF1A3C756B5CEC6AFD5671C74CEB8722730F302E372125ACB024C0228B7BB7F87D30784D648F73C99C3193A11E5889A4D7BA25CC574CF75AE93E8BEE65FE8B3D1FD0110E41CC2&h=142BA7D2B2D74B7BD0133B350C140A77A950EA4E18EFF4F4C111F7E59C7D86C4&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=ea0d70c7851f0e0d4780143aaa330bf5&upv=e96bcbcf2c3c0109d4f29793a53615c8&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DA0C50CA1DBCA90232055F97C6CBD2088806F69BC2CF8E48182453DC8243DBD4AD37DDAC00F6607998058E0AAE15B57D3C4DCCBBB9172E960A323882BC03F1ECCAE12145DB8CA23C27D696DCD0640E991&h=CD9434B7A986B872E9A445E410F694D2E4B504F59F6F6DE5A9DBAB169ECADED2&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://sharewareonsale.com/?download_file=5167345&order=wc_order_577961ee16ecc&email=rojansatyal@gmail.com&key=fe669648b3c520cb05cb855bfbaf7d65

http://windscribe.en.softonic.com/download

http://en.softonic.com/sads/tracker.php?ev=c&co=MZ&sid=c06a2c3fc52a5703f6361d705e826c44&upv=c016cab870027955ae5e25daca3b8a66&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D56ADA0BF86EA54C5B4318AF5F75DF425A867E8DA57FA9A40E52F3B0C048691FEC94B13D8F491B3CDCCB704D30B64ABFD9A765A345E02FA70E45EF08B07CC26FD8C546DDBEC916D9CD5CD9EE4103A9DE0&h=1CF393491FCC791D2308EC6D4C37D311CF1A8C06A661E07870097B3A93FDFF02&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=e0c845d8c325f2cbf275568b01046cfb&upv=190badbc9fb5e8558dddb506a10c715b&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D2713FCEA467242002CBEEE5BAA05E5651D3DD8BC900DF2B2F11A174EF78233181E5395BA0B6C2B008A831DC9C14B919F4874B5F8CABC6D36A6E34573F5357AD3FED9F3497332489765108665D1C1A7FF&h=872F3EC32E966F55743C515E8ADF5390E33B629B364D089F136F084784C249E4&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PK&sid=0a39f52a951703db5bd0e31e8368e9f8&upv=3a45c1480f7a2d074b9cf1f2a3dc2d2f&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DDE071C9D1D0C6BED19469FEE4FDA56C9922C2AD95C6B1A0A7671931921E18B483D4B2C8B26B333B7A566E7D2FB06138718F5E7D0C27B09EF88957F8C99B9F334D7B4E8BAA2827B247F32E28D65DE8A73&h=1E87ED12F38BD616138D1916C08782D3DD8D815171810E8DF2B0217AA0A830C9&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

https://sharewareonsale.com/?download_file=5167345&order=wc_order_57754431db1b9&email=betievant@gmail.com&key=fe669648b3c520cb05cb855bfbaf7d65

https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=PK&sid=23ad7e1e2f1dd3672ed3ba7a4ff9d711&upv=f335cd4518178222d048e2aef440fb40&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D14B34E5DADC7C63971FE33AE5184ED744894327A64EAA18BA712D219BCB2327BF21B573F674B9D5C3C058B4C33BD16E355D83B20E431CA07C22D0ED33ACDB6C160A59F748B37CB837DBC8456AE6A0268&h=324A02E9FAD0AE193B1630BDAD489E13A035FA358D0ABA79FBCE1955161B2CB2&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://sharewareonsale.com/?download_file=5167345&order=wc_order_577b316cbfee5&email=mhujaili@gmail.com&key=fe669648b3c520cb05cb855bfbaf7d65

http://en.softonic.com/sads/tracker.php?ev=c&co=SA&sid=eed0f777bdb59dacbcb5b42726224e0c&upv=58c23cf6f8cbd61aafe2c02f0744dc06&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9D87C2292DCBA0EEBBB3C072944A6B0D83B6DB0ACE7E16B51A66CE58ECE6FEFC2B458AF229F09F02BB8A4BD74B2E3855CC2BA599517B338D324D6605DC0A5E231CA2028FDBCAF6887A865D5E45D9A3042D&h=3EBA1942AB51EF3390F245DAA1AF392B0DE3DA7A768CB03C62489E8D6F72ED35&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AE&sid=e77df3e8b1a40b6ffef5100d60cfefc0&upv=600166098533edacccf013be08e21cdf&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E032123FF0E09F5565AD6A3C9E074A2DA0981EF73CDB901A909D28DC96853728A2F1F49EEBAB7A75C8D2E5EF7549DD0A4B833C165D0DFCB7AB8D672D8CDDB319481CCB78672886531B5A2FD8045361F6C9DDD480DE9E541B9851393F907E86C148FEE9DDA70DEF0F62DF2C46A622838A9A8B099D6CDECED7BB098C157FBB8D70C4C7A90DC9E59ABDDF04E832A85FAEA4056F90E83FFCE62E54F094AF75276A4F44C&h=895AAD04712DC77E620C9726FD0C029E4F17F508B491076C7BD47CEA244BB518&directdownload=1&f=69718076&d=https://assets.windscribe.com/desktop/.../Windscribe.exe

https://windscribe.com/.../desktop

Scan windscribe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.