home

uninstall.exe

WordFly

The application uninstall.exe by WordFly has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WordFly 1.10.0.28 by WordFly.
Publisher:
WF  (signed by WordFly)

Product:
WF

Description:
WF Setup

Version:
1.10.0.28

MD5:
5350c94b9890c5190d2e5575a855fcc7

SHA-1:
3b2be3258cbc34a7af62a2e5f32fb2887c01fbce

SHA-256:
6bc0daa0e5405bdf93fab8b314036892d608e7a01c780d13859d0e95f4e90e64

Scanner detections:
11 / 68

Status:
Potentially unwanted

Analysis date:
1/13/2025 12:37:24 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mabezat [Wrm]
160518-2

AVG
Win32/Mabezat
2015.0.4591

Dr.Web
Adware.Plugin.1137, Win32.HLLW.Tazebama
9.0.1.05190

Emsisoft Anti-Malware
Win32.Worm.Mabezat.Gen
11.5.0.6191

ESET NOD32
Win32/Mabezat.A virus
7.0.302.0

F-Prot
W32/Mabezat.A-2
4.6.5.141

F-Secure
Win32.Worm.Mabezat.Gen
5.15.96

McAfee
Virus.W32/Mabezat.a
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.2949.0

Norman
Win32.Worm.Mabezat.Gen
19.05.2016 01:04:49

Reason Heuristics
PUP.Vitruvian.WordFly.Installer (M)
16.6.30.13

File size:
464.9 KB (476,063 bytes)

Product version:
1.10.0.28

Copyright:
(c) 2015 WF

Original file name:
wf-setup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wordfly_1.10.0.28\uninstall.exe

Digital Signature
Signed by:
WordFly

Authority:
GlobalSign nv-sa

Valid from:
2/23/2015 6:45:21 PM

Valid to:
2/23/2017 6:45:21 PM

Subject:
E=support@wordflyapp.com, CN=WordFly, O=WordFly, L=San Diego, S=CA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E7073B3A3A975514F304B870C2CE6C40

File PE Metadata
Compilation timestamp:
12/6/2009 6:52:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:4kyiDNR+FIxCw178TYrc2p7DCDHz7x2Jiax7mzSEhj0gw7GRk2cGrI:eiX+FIxC8rbDC7x2JlxCzSEhj0gG2cv

Entry address:
0x323C

Entry point:
BB, 48, 97, 15, C7, 93, E9, 20, 01, 00, 00, E9, 8F, F2, EE, 9A, 1E, F2, EE, A2, 52, 76, 72, 72, F2, 72, 72, AB, 72, 72, 72, D1, A3, A8, A3, A2, A3, AB, A9, A8, 72, 72, 72, E6, D3, EC, D7, D4, D3, DF, D3, A0, D6, DE, DE, 72, 72, 72, 72, CE, 72, 72, 72, B8, E4, D7, D7, BE, DB, D4, E4, D3, E4, EB, 72, B5, E4, D7, D3, E6, D7, B6, DB, E4, D7, D5, E6, E1, E4, EB, B3, 72, 72, 72, 72, B9, D7, E6, C9, DB, E0, D6, E1, E9, E5, B6, DB, E4, D7, D5, E6, E1, E4, EB, B3, 72, 72, 72, 72, B9, D7, E6, BF, E1, D6, E7, DE, D7...
 
[+]

Entropy:
7.2248

Code size:
23 KB (23,552 bytes)

Program Uninstaller
Program name:
WordFly 1.10.0.28

Display publisher:
WordFly

Display version:
1.10.0.28

Uninstall string:
C:\Program Files\WordFly_1.10.0.28\Uninstall.exe


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.