home

uninstaller.exe

Fedder Corporation Limited

The application uninstaller.exe by Fedder Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program MegaZipper by MegaZipper. This file is typically installed with the program MegaZipper by Fedder Corporation Limited.
Publisher:
Fedder Corporation Limited  (signed and verified)

MD5:
72b523b68bb06dd89e5a4f1e7c19cca8

SHA-1:
374b4dc8f6ae2f80093c75e7333b67b439015acb

SHA-256:
d8d860f156e5241d2b6d06c4d11627ad0fe785d491e43ed4157050f9878458be

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 6:48:47 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic.FedderCorporation.Installer.Meta
15.11.11.8

File size:
158.4 KB (162,240 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\megazipper\uninstaller.exe

Digital Signature
Signed by:
Fedder Corporation Limited

Authority:
VeriSign, Inc.

Valid from:
9/16/2013 5:00:00 PM

Valid to:
9/17/2015 4:59:59 PM

Subject:
CN=Fedder Corporation Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Fedder Corporation Limited, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
22D2B6AFF4224506F133F373AAB07BFB

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:igXdZt9P6D3XJABthhAhQ8V+/uwHEVdZd5tZwP:ie34+Bt4hQ8LwHEVdT1wP

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
6.3347

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Program Uninstaller
Program name:
MegaZipper

Display publisher:
MegaZipper

Display version:
1.0

Uninstall string:
C:\Program Files (x86)\MegaZipper\uninstaller.exe


The file uninstaller.exe has been discovered within the following program.

MegaZipper  by Fedder Corporation Limited
54% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.