home

unins000.exe

Softmaking srl

The application unins000.exe by Softmaking srl has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program UltraZip by UltraZip.
Publisher:
Softmaking srl  (signed and verified)

Description:
Setup/Uninstall

Version:
51.52.0.0

MD5:
79b3d6f911422f0e118d07a3d49055d2

SHA-1:
94a01b44a9bf0c548d6e0ebbcfb90182c242cc30

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
2/25/2025 3:43:17 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.9.9.0

File size:
695.3 KB (711,976 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\installer\ultrazip\unins000.exe

Digital Signature
Signed by:
Softmaking srl

Authority:
VeriSign, Inc.

Valid from:
10/24/2014 2:00:00 AM

Valid to:
10/25/2015 1:59:59 AM

Subject:
CN=Softmaking srl, O=Softmaking srl, L=Roma, S=Italia, C=IT

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5BE5A2BFE57FDEC912A4DC8350D36347

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:QTPcYn5c/rPx37/zHBA6a5UeYpthr1CERAgrNuR+1Iq5MRxyFgd:MPcYn5c/rPx37/zHBA6pFptZ1CEQqMRx

Entry address:
0x98BA8

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, 57, E8, 8E, A7, F6, FF, E8, E5, CA, F6, FF, E8, 5C, D7, F6, FF, E8, FF, D7, F6, FF, E8, 82, 0D, F7, FF, E8, 95, 7B, F7, FF, E8, F8, 7D, F7, FF, E8, 4F, 9D, F7, FF, E8, 62, 04, F8, FF, E8, 5D, C3, F8, FF, E8, 20, 6B, F9, FF, E8, 07, 7E, F9, FF, E8, 52, 6B, FB, FF, E8, 19, 70, FB, FF, E8, 18, 78, FB, FF, E8, F7, 8B, FB, FF, E8, EA, A5, FB, FF, E8, A9, E4, FB, FF, E8, A8, F3, FB, FF, E8, BB, 06, FC, FF, E8, DA, B9, FC, FF, E8, D1, 41, FD, FF, E8, FC, FF, FD, FF, E8, 5F, B3, FE...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
607.5 KB (622,080 bytes)

Program Uninstaller
Program name:
UltraZip

Display publisher:
UltraZip

Display version:
294

Uninstall string:
"C:\WINDOWS\Installer\UltraZip\unins000.exe"


Remove unins000.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.