home

uninstall.exe

WordFly

The application uninstall.exe by WordFly has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WordFly 1.10.0.28 by WordFly.
Publisher:
WF  (signed by WordFly)

Product:
WF

Description:
WF Setup

Version:
1.10.0.28

MD5:
b347a7a43a563ef6847a4c9857e91e32

SHA-1:
61250b5f8a167db7e40a59e3753050b77a55d804

SHA-256:
186a55f02911c15274ff270c58151a75a163d4f2efd9b4caa008b494f583f9ca

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
1/13/2025 12:23:01 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mabezat [Wrm]
160518-2

AVG
Win32/Mabezat
2015.0.4591

Dr.Web
Adware.Plugin.1137, Win32.HLLW.Tazebama
9.0.1.05190

Emsisoft Anti-Malware
Win32.Worm.Mabezat.Gen
16.06.27

ESET NOD32
Win32/Mabezat.A virus
8.0.319.0

F-Prot
W32/Mabezat.A-2
4.6.5.141

Kaspersky
Worm.Win32.Mabezat
15.0.0.562

McAfee
Virus.W32/Mabezat.a
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.2775.0

Norman
Win32.Worm.Mabezat.Gen
19.05.2016 05:17:13

Reason Heuristics
PUP.Vitruvian.WordFly.Installer (M)
16.6.27.20

VIPRE Antivirus
Threat.303962
50318

File size:
464.9 KB (476,063 bytes)

Product version:
1.10.0.28

Copyright:
(c) 2015 WF

Original file name:
wf-setup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wordfly_1.10.0.28\uninstall.exe

Digital Signature
Signed by:
WordFly

Authority:
GlobalSign nv-sa

Valid from:
2/23/2015 6:45:21 PM

Valid to:
2/23/2017 6:45:21 PM

Subject:
E=support@wordflyapp.com, CN=WordFly, O=WordFly, L=San Diego, S=CA, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E7073B3A3A975514F304B870C2CE6C40

File PE Metadata
Compilation timestamp:
12/5/2009 2:52:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:4jyiDNR+FIxCw178TYrc2p7DCDHz7x2JifNZx0g6wY4GJjc9hk1S:diX+FIxC8rbDC7x2Jsn6wY4GJjc9hoS

Entry address:
0x323C

Entry point:
BB, 47, 3A, 92, E8, 93, E9, 20, 01, 00, 00, B3, 59, BC, B8, 64, E8, BC, B8, 6C, 1C, 40, 3C, 3C, BC, 3C, 3C, 23, 3C, 3C, 3C, 9B, 6D, 72, 6D, 6C, 6D, 75, 73, 72, 3C, 3C, 3C, B0, 9D, B6, A1, 9E, 9D, A9, 9D, 6A, A0, A8, A8, 3C, 3C, 3C, 3C, 98, 3C, 3C, 3C, 82, AE, A1, A1, 88, A5, 9E, AE, 9D, AE, B5, 3C, 7F, AE, A1, 9D, B0, A1, 80, A5, AE, A1, 9F, B0, AB, AE, B5, 7D, 3C, 3C, 3C, 3C, 83, A1, B0, 93, A5, AA, A0, AB, B3, AF, 80, A5, AE, A1, 9F, B0, AB, AE, B5, 7D, 3C, 3C, 3C, 3C, 83, A1, B0, 89, AB, A0, B1, A8, A1...
 
[+]

Entropy:
7.2286

Code size:
23 KB (23,552 bytes)

Program Uninstaller
Program name:
WordFly 1.10.0.28

Display publisher:
WordFly

Display version:
1.10.0.28

Uninstall string:
C:\Program Files\WordFly_1.10.0.28\Uninstall.exe


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.