home

eUninstall.exe

eCyber

EMG Technology Limited

The application eUninstall.exe, “eCyber uninstall application” by EMG Technology Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program AirZip by EMG Technology Limited.. This file is typically installed with the program AirZip by EMG Technology Limited which is a potentially unwanted software program.
Publisher:
Woodtale Technology Inc.  (signed by EMG Technology Limited)

Product:
eCyber

Description:
eCyber uninstall application

Version:
1.0.86.8163

MD5:
1a10511f3c6c32c91cd6dca492e59564

SHA-1:
efdc6103288925254680fc967ca6d98c1436cee7

SHA-256:
a6b54fa9477d3a67f9b57fdcf61d9840197bd257e08aff367ea42c6645d1f8b1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 7:54:26 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.3.9.23

File size:
1 MB (1,091,216 bytes)

Product version:
1.0.86.8163

Copyright:
Copyright (C) 2012

Original file name:
eUninstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\airzip\euninstall.exe

Digital Signature
Signed by:
EMG Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
7/31/2013 1:20:50 AM

Valid to:
8/1/2014 1:20:50 AM

Subject:
CN=EMG Technology Limited, O=EMG Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214B00008DA514B60ED8EE5329E4DF7F28

File PE Metadata
Compilation timestamp:
10/14/2013 7:57:39 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:OV862QA7XP+nRZIbxHDck/WNdtTQ3uyYa:jl7t7/kdtTQ3uy3

Entry address:
0x8CE58

Entry point:
E8, AF, 5D, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 3C, F9, FF, FF, 8B, 45, F0, 83, B8, AC, 00, 00, 00, 01, 7E, 13, 8D, 45, F0, 50, 6A, 04, FF, 75, 08, E8, 18, 5E, 00, 00, 83, C4, 0C, EB, 10, 8B, 80, C8, 00, 00, 00, 8B, 4D, 08, 0F, B7, 04, 48, 83, E0, 04, 80, 7D, FC, 00, 74, 07, 8B, 4D, F8, 83, 61, 70, FD, C9, C3, 8B, FF, 55, 8B, EC, 83, 3D, 28, F2, 4E, 00, 00, 75, 12, 8B, 45, 08, 8B, 0D, 08, 9C, 4E, 00, 0F, B7, 04, 41, 83, E0, 04, 5D, C3, 6A, 00, FF, 75, 08...
 
[+]

Entropy:
6.4147

Code size:
707.5 KB (724,480 bytes)

Program Uninstaller
Program name:
AirZip

Display publisher:
EMG Technology Limited.

Display version:
1.5.11

Uninstall string:
C:\Program Files\AirZip\eUninstall.exe


The file eUninstall.exe has been discovered within the following program.

AirZip  by EMG Technology Limited
Publisher's description - “Airzip is a free and easy to use compression software that is based on 7-Zip technology. With its fast compression engine,Airzip is a powerful tool for unzipping Zip archives, creating Zip-compatible files and other archiving software.”
airzip.webssearches.com
About 60% of users remove it
 
Powered by Should I Remove It?

Remove eUninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.