home

winzip19-wz.exe

WinZip Computing LLC

The program is a setup application that uses the Inno Setup installer. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from cdn.winzipdelivery.com and multiple other hosts.
Publisher:
WinZip  (signed by WinZip Computing LLC)

Product:
WinZip

Version:
1.0.5.a0.1_37199

MD5:
a114f78f6a09c3e1343e44edf7209a4a

SHA-1:
3ac30a94a627dd637d54f8ca17af42f005770136

SHA-256:
0ed8cead42661616c362120242b8c880904c2c42290b2b1359bb969d7bf4563c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 7:50:43 PM UTC  (today)

File size:
1 MB (1,080,488 bytes)

Product version:
1.0.5.a0.1_37199

Copyright:
WinZip

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\winzip19-wz.exe

Digital Signature
Signed by:
WinZip Computing LLC

Authority:
GlobalSign nv-sa

Valid from:
2/10/2015 9:50:10 AM

Valid to:
2/11/2016 9:50:10 AM

Subject:
CN=WinZip Computing LLC, O=WinZip Computing LLC, S=Connecticut, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11213AC849B929DBABC960315B5B9070927F

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:HmJa7dm5K5c/WVHvy3NGwbIqWlWOJKyUpNUYPpLShl7uK:HMGA2PEN+txBYPshf

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

Scheduled Task
Task name:
{9CE0305D-D58C-47F8-B5FB-1A33F187194B}

Trigger:
Registration (Runs on registration)


The file winzip19-wz.exe has been seen being distributed by the following 41 URLs.

http://cdn.winzipdelivery.com/c?fallback_url= &x=lkI2AiFTyzw RPYtJV5b8BUUlwvNwh/GxxKyWbv4cYY=&downloadAs=winzip19-wz.exe&c=ZCipb2CTigN3UD3UrGknDVn8KpQPS/.../1Xhc0DB3Kxyeu9jRGfswG4LLVLkIZZr20BSTeF2mqumudy22iXg==

http://cdn.winzipdelivery.com/c?fallback_url= &x=VB0rswKgiWAUHlDdYrgchXqNtPrPb/gwAJ/.../9YvdyRX7zZw==

http://cdn.winzipdelivery.com/c?fallback_url= &x=19gHmdCpkTMQ2SCYdaG8GQA 5A1D24vZQSg1yJAahok=&downloadAs=winzip19-wz.exe&c=8K4mTmP5QPDnXbGPX5/.../g==

http://cdn.winzipdelivery.com/.../k2ZId3toBmxDreegREz8th7zzYU2WEWkTDlG9qWkytklk A4bo4BJzQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=PB8E4Si/zPqxUOiTSgPHpWj3ZH8O77vG7a4DZZX20yY=&downloadAs=winzip19-wz.exe&c=wvmb5YIZSgmkGE yIaT QTlDxZgxKwmekRe50X6Vde/.../HA9jTizMYtVQ==

http://cdn.winzipdelivery.com/.../CXC053jfLzAxyiaVs 7 2R2jUMijd7VZV3xInfeFKBJ6xnwgI0HDmxoMnbw==

http://cdn.winzipdelivery.com/c?fallback_url= &x=CVTCHabywqL0AkSaQenSP97 b3lbKfF4H3sg5LbGNa8=&downloadAs=winzip19-wz.exe&c=lqZL1E2gpnXPOe/.../4glrWQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=mRWI52aBtSeFuiNtgrdI4rAoCZGb8VqrKPu3hiWSZMc=&downloadAs=winzip19-wz.exe&c=TX1w0LbRwppMBR3Y6/.../zFEEifJpCgxDXavi1Y8mZAZEa8HPuwWqKQ==

http://cdn.winzipdelivery.com/.../V3vpidi8zhhpYo9npqU4H5mjlzNY9FPzL3cmg=&downloadAs=winzip19-wz.exe&c=8l8l9cXyYY8l7kXINYKrjSDqpwMcu2mcAWKgUgGCKapfqae1P43Sm1d1zh9vHUxDe4WMWmeh6BPMjxJOCxYfCg==

http://cdn.winzipdelivery.com/.../gT3XuVSbSLc8pag=&downloadAs=winzip19-wz.exe&c=KOk4UQnD2AiHIUNX1vvuBRlF3QYthiuqBADUnb0rVyTCyQmbyGAbgSAihY3XGt2HRj3kKrpfZDNPpo6nw9Aa w==

http://cdn.winzipdelivery.com/c?fallback_url= &x=TGdFlsqCzXtQutIZ aK4 Zewi4it4f 1gEE08AYIxh8=&downloadAs=winzip19-wz.exe&c=DCxB9SALwlJ7YYIU l8BWRDcdot LhE64 YivqJzMGwlhHnWtoqIxxrpr94B96mdXxkADq9gsWO7jukJrRzFyg==

http://cdn.winzipdelivery.com/.../Dppt39DoUiFNMez8aNcKwZ6fMkVrimWs=&downloadAs=winzip19-wz.exe&c=RM8bmQSRVN8qaSbZx2vyU3 zlfprA5CAyV0DGySrdMMyThMyE3UYqNcFUsjohD1KXkwkjh03DcpligB 1d8sHg==

http://cdn.winzipdelivery.com/c?fallback_url= &x=0FQirmVr0/.../hFya8=&downloadAs=winzip19-wz.exe&c=lhrcSV2PzwJK8Updx6ved75KvUIFMFy45lmXLrgQKggMzgis55dtsgb4IGQQUbek9mxU00wxwpAgQsKSnG2Pdw==

http://cdn.winzipdelivery.com/c?fallback_url= &x=TlkljxjB6Sg8/NXvJO5 YvPhcWfOvTFmsSBSc92xSUQ=&downloadAs=winzip19-wz.exe&c=JBO/SXmyx8jnH/.../fHBUhUP5o35NvJSf1HmJw==

http://cdn.winzipdelivery.com/c?fallback_url= &x=A9S3ZfnS4FDfWyafwj7zYklmQ0bXrqaYcFcuawuD6wA=&downloadAs=winzip19-wz.exe&c=Uimnv6IA/.../irrB9newWsfMrj1luvHdjB2bD0BH3dZggIOBqiIrRV6UJeNHjWKA==

http://cdn.winzipdelivery.com/.../1PgfxcXctjXbNE1ui7PPHdBQ72U9dYJjicGpD17Pa4=&downloadAs=winzip19-wz.exe&c=OWYC4bJKjBO3XwT9iptTsh2VrhMvL81nUciuqfHF0wEPVHbe7r2Q57f4QxrEyNZglvQo6Jz bW0YAdCW70sEtA==

http://cdn.winzipdelivery.com/c?fallback_url= &x=cd28P vM7rLVKpbxVB9iQE64SMIAVcQZfq88FmtyuaE=&downloadAs=winzip19-wz.exe&c=TqSfazVLAojNtrU/.../H2PLSlQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=3qE3z7vfuYZf4XlC pjDkkZwd5lkLP89Sw18 bmh8dU=&downloadAs=winzip19-wz.exe&c=opz0bkICRdUOb HLnlchcQmuF/1GMcsBuAbkJ eOQsXg3ynXkckq2GBo/.../P 7S9AuLjtBu12M80u4kAju7Kw==

http://cdn.winzipdelivery.com/.../MpjXNPA9V6skSkj5Ep2x3yvCER64QzYzTDYT7Ni4YaZLmOX6J8A==

http://cdn.winzipdelivery.com/.../nuu4EFFnTZVzQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=W8S5LlEpSJKpkGrP590t4h8tkUCIWn2OzgBENgv0mrY=&downloadAs=winzip19-wz.exe&c=LOJ2DMMd44kdFEqk5n1zwIzT4hcWmB0VHxot8pz9Y04fVQ0OrcDPc8yT4 Zy8WfP6f4ewUIN6u746AzepHDWcQ==

http://cdn.winzipdelivery.com/.../yoR9NU5ZulKN1pGJJkaKqSYEiiMdS69DMK OXFbPw3vcUbungANmhInFnwqreNM9SKaWFED CTDgw==

http://cdn.winzipdelivery.com/c?fallback_url= &x=vOLOGJejW2GH82u50riArNRcFV2IL9v2sd hIzFQcQo=&downloadAs=winzip19-wz.exe&c=VV1aklIW UUIFz5YRKtHKTp1dPsOUenfIl8ruPzkwz0A5S1Zjwdb1EhU6 4WLQyMpDQsCqcFRCstlxINMKG4Kg==

http://cdn.winzipdelivery.com/c?fallback_url= &x=FE63oSkRtKqzr4iw1Vcs0w6gsvWgk7z VwbYGHK0pE4=&downloadAs=winzip19-wz.exe&c=twtGmMky8uA8tcaYFzJQ/C7Ucv9uQXD0WouS0yBwC2 B/.../bGWLolH8ncQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=HMispsHjivGLj7lu7MR9lSkGCov3Yxy6F144QLXE5Bo=&downloadAs=winzip19-wz.exe&c=RjutPjw DooyrTenhVb/fjpn4bHpOPzMsziNbduqxdG juxeTZaUcKnM6xO/.../djClTQ==

http://cdn.winzipdelivery.com/.../p31DiznwQakCFNbDcy3PbRVvhw==

http://cdn.winzipdelivery.com/.../3fV5UxJgiuxGcASBfg==

http://cdn.winzipdelivery.com/c?fallback_url= &x=V1nZfJm25Es9S7/.../F0HSFjwGTODDnS8sGkJ3ZjEIUmHYUjcmPxATBs3D2h10mCA8wiKQ==

http://cdn.winzipdelivery.com/c?fallback_url= &x=vmUyRi3ejei7LryeUi41TMKKYXFbLdQ4PGEvFznmxVs=&downloadAs=winzip19-wz.exe&c=/.../A==

http://cdn.winzipdelivery.com/c?fallback_url= &x=fMh4LYffCfptoZNgFUn7k342vPGOMCccjNVsiH4vjhk=&downloadAs=winzip19-wz.exe&c=54KFTdDGTqyg6QURtqmSsaDEiNnw MaFHjOO2I3V6RYI7rYGZ BsbOTbVHQz3 6XlUeRV0lymIhbQ1MDFvpYsg==

Latest 30 of 41 download URLs

Scan winzip19-wz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.