home

unzip32.dll

UnZip

oTweak Software LLC

The module unzip32.dll, “UnZip: list, test and extract compressed files in a ZIP archive” by oTweak Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Info-Zip <www.info-zip.org>  (signed by oTweak Software LLC)

Product:
UnZip

Description:
UnZip: list, test and extract compressed files in a ZIP archive

Version:
5.51.1871.34282

MD5:
6e55f64e84fb014ef5c1eea297febc99

SHA-1:
271cd0aeab51407a8d98b8f6816d70bbbc783618

SHA-256:
62631329aeb4179b260e60d8d4fe607a7f45579061941145d778e8e164c175fe

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 2:27:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.oTweak.Optional (L)
17.3.16.4

File size:
165.8 KB (169,776 bytes)

Product version:
5.51.1871.34282

Copyright:
© 2005 Info-Zip <www.info-zip.org>

Trademarks:
Info-Zip®, UnZip®, unzip32®

Original file name:
unzip32.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\driverupdaterpro\tools\unzip\unzip32.dll

Digital Signature
Signed by:
oTweak Software LLC

Authority:
thawte, Inc.

Valid from:
3/5/2015 5:30:00 AM

Valid to:
3/5/2017 5:29:59 AM

Subject:
CN=oTweak Software LLC, O=oTweak Software LLC, L=Rostov-Na-Donu, S=Rostovskaya obl., C=RU

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1BA315B89D1AF7C2CB153F29392B2B78

File PE Metadata
Compilation timestamp:
2/14/2005 11:33:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

Entry address:
0x1000

Entry point:
55, 89, E5, 83, EC, 18, 89, 75, FC, 8B, 75, 0C, 89, 5D, F8, 83, FE, 01, 74, 5C, 89, 74, 24, 04, 8B, 55, 10, 89, 54, 24, 08, 8B, 55, 08, 89, 14, 24, E8, D6, 0B, 00, 00, 83, EC, 0C, 83, FE, 01, 89, C3, 74, 2C, 85, F6, 75, 0C, 8B, 0D, 00, 60, 66, 65, 85, C9, 75, 10, 31, DB, 89, D8, 8B, 5D, F8, 8B, 75, FC, 89, EC, 5D, C2, 0C, 00, E8, 59, 00, 00, 00, EB, EB, 8D, B4, 26, 00, 00, 00, 00, 85, C0, 75, D0, E8, 47, 00, 00, 00, EB, C9, 90, 8D, 74, 26, 00, C7, 04, 24, 80, 00, 00, 00, E8, 04, 27, 02, 00, A3, 00, 60, 66...
 
[+]

Entropy:
6.4534

Code size:
141 KB (144,384 bytes)

Remove unzip32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.