home

winzip90.exe

WinZip Computing, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.google.com and multiple other hosts.
Publisher:
WinZip Computing, Inc.  (signed and verified)

MD5:
5db8c0579c96720fc8cb83d6e5647f6c

SHA-1:
3f2dd5b33df5233fbdef513817043bf9833ef43e

SHA-256:
05a63bcf4c5df6a560f8a6eac9d18695f1b8c537f3dfd55455a9087b6adde00b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:18:25 AM UTC  (today)

File size:
3.9 MB (4,077,184 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
WinZip Computing, Inc.

Authority:
VeriSign, Inc.

Valid from:
4/6/2005 8:00:00 PM

Valid to:
4/23/2006 7:59:59 PM

Subject:
CN="WinZip Computing, Inc.", OU="WinZip Computing, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="WinZip Computing, Inc.", L=Mansfield, S=Connecticut, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
256ACBABE68A054C6E710BC9896E79FB

File PE Metadata
Compilation timestamp:
7/23/2004 7:33:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
98304:cbijxSGy28xNBYyPFN0XIp5tdQs9FCj7fNLuMeiJX:pV3OxNBYyPTtRFCj7fNaEJX

Entry address:
0x4603

Entry point:
53, FF, 15, 50, 80, 40, 00, B3, 22, 38, 18, 74, 03, 80, C3, FE, 40, 33, D2, 8A, 08, 3A, CA, 74, 10, 3A, CB, 74, 07, 40, 8A, 08, 3A, CA, 75, F5, 38, 10, 74, 01, 40, 52, 50, 52, 52, FF, 15, 54, 80, 40, 00, 50, E8, CD, FA, FF, FF, 50, FF, 15, 7C, 80, 40, 00, 5B, 55, 8B, EC, 51, A1, 2C, AE, 40, 00, 83, 0D, 88, B4, 40, 00, FF, 56, 33, F6, 39, 35, 00, AD, 40, 00, 89, 35, 1C, AE, 40, 00, 89, 35, F8, AD, 40, 00, A3, 28, AE, 40, 00, 75, 05, E8, 2C, E2, FF, FF, 39, 35, 4E, AE, 40, 00, 76, 66, 0F, B7, 05, 44, AE, 40...
 
[+]

Entropy:
7.9928  (probably packed)

Code size:
28 KB (28,672 bytes)

The file winzip90.exe has been seen being distributed by the following 18 URLs.

https://www.google.com/url?hl=en&q=http://download.winzip.com/.../winzip90.exe&source=gmail&ust=1471830083060000&usg=AFQjCNHOA6wQwrxbJmwE2QadRqhfxjjzTw

http://www.oldapps.com/winzip.php?app=5db8c0579c96720fc8cb83d6e5647f6c

https://www.google.com/url?hl=en&q=http://download.winzip.com/.../winzip90.exe&source=gmail&ust=1476009848476000&usg=AFQjCNFymQdyDJJczth2U4BiIpg2C48pEw

https://www.google.com/url?hl=en&q=http://download.winzip.com/.../winzip90.exe&source=gmail&ust=1467495984664000&usg=AFQjCNFgAkSDL2r5kNLM6TCbh4N6Y3HB2w

https://www.google.com/url?hl=en&q=http://download.winzip.com/.../winzip90.exe&source=gmail&ust=1476977268712000&usg=AFQjCNELFH1qqx6xQAvKp0odVnJJAwgwuw

http://s6404.chomikuj.pl/File.aspx?e=taYeo50Q26Ofp5-CnJOL90aAXpybjOjvWU8St46-x5t9ryg43whwEUiDJNkcgIOe196ZE2O0wWOrqez7CuMPYNmBuDfw2yvM_EnlKpOuNuw_th19wofEkREOoKEIIPVG&pv=2

temp:winzip90-1.exe

http://s6404.chomikuj.pl/File.aspx?e=taYeo50Q26Ofp5-CnJOL9wlsKlkrWpZdDL6iPHLrFqQ55vYkcmHVQXrZ3l6z2bmanc5BnXOsJnHTP1a5EJ9L3Q-N2Dz1BFaFL3l-sjAH8NAGnMi1HWXhdYFD9NN3aZzK&pv=2

https://www.google.com/url?hl=en&q=http://download.winzip.com/.../winzip90.exe&source=gmail&ust=1468721774356000&usg=AFQjCNFOALLkh5JCxCIxq4_ASaipYYEyyA

temp:winzip90.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ2NjY5NTUwODtzOjI6ImlkIjtpOjY3NjU7czo0OiJmaWxlIjtzOjEyOiJ3aW56aXA5MC5leGUiO3M6MzoidXJsIjtzOjQ0OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3Mvd2luemlwLTktMCI7czo0OiJwYXNzIjtzOjMyOiI3ZDZjMGI4OWE1NjU4Nzk5M2ZjNGY4MDY1ZjZlYzI5YyI7fQ==

http://static.letoltokozpont.hu/letoltokozpont.hu/programok/.../winzip90.exe

http://www.utworki.pl/.../winzip.exe

http://s10003.chomikuj.pl/File.aspx?e=taYeo50Q26Ofp5-CnJOL9w9me6IYIScjq66UsFw9GVNEHDxlPgk-d3zxaVN-SLQNAVfpm0GZXzrj-JAVQ_WMzP_g2ogPK8imS5VOoHh4v9tiYyoLskcnSkO3bfd3FOTt&pv=2

http://s10003.chomikuj.pl/File.aspx?e=taYeo50Q26Ofp5-CnJOL93ws_Mfl0Ojzik4XJnHVXy61ql_frcu_q-jNgpyGwUabBGB4GDIZN9aZfBA7v7yjebDMt97GaD-49OQKZBLlnVWPSac-tw55bdMPj9IOkum5&pv=2

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1NjQ2MjI3MDtzOjI6ImlkIjtpOjY3NjU7czo0OiJmaWxlIjtzOjEyOiJ3aW56aXA5MC5leGUiO3M6MzoidXJsIjtzOjQ0OiJodHRwOi8vd3d3Lm9sZHZlcnNpb24uY29tL3dpbmRvd3Mvd2luemlwLTktMCI7czo0OiJwYXNzIjtzOjMyOiJjNGQxZmM1NGNmNjAzZDc0Y2M2M2ZlYmFjNjk4MDI3ZiI7fQ==

http://winzip.software.informer.com/.../

http://download.winzip.com/.../winzip90.exe

Scan winzip90.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.