tmp.edb

LinkWiz

The file tmp.edb by LinkWiz has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Link Wiz  (signed by LinkWiz)

Product:
Link Wiz

Description:
Link Wiz Setup

Version:
1.10.0.14

MD5:
7876cb769b88431558c66f20888e788a

SHA-1:
a17b9416b786ea31be763dfe9dc4dce05bf6a97c

SHA-256:
857ed7035306b67de3a4cac456280edb0affc6c4c631c2f2cb421e8796f4d68c

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/27/2024 8:16:07 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.LinkWiz.Installer (M)
16.6.3.1

File size:
1 MB (1,056,768 bytes)

Product version:
1.10.0.14

Copyright:
(c) 2014 Link Wiz

Original file name:
linkwiz-setup.exe

Language:
Language Neutral

Common path:
C:\ProgramData\avira\antivirus\eventdb\temp\tmp.edb

Digital Signature
Signed by:

Authority:
GlobalSign nv-sa

Valid from:
2/23/2015 8:43:50 PM

Valid to:
2/23/2017 8:43:50 PM

Subject:
E=support@linkwizapp.com, CN=LinkWiz, O=LinkWiz, L=San Diego, S=CA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A175F4ACE7F00EC14DB23572A3C1D217

File PE Metadata
Compilation timestamp:
12/6/2009 12:52:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:Ws2mBsrgzXsOcBeJMRMo413oabVYQuLlsFXemlyG7kQk:WsoyNtJMRMN1YwVPuLls5emlyYkQk

Entry address:
0x323C

Entropy:
7.7424  (probably packed)

Code size:
23 KB (23,552 bytes)

Remove tmp.edb - Powered by Reason Core Security