home

winzip20_downwz.exe

WinZip

WinZip Computing, S.L.

Publisher:
WinZip Computing, S.L.

Product:
WinZip

Version:
1.0.220.1

MD5:
6db92b0ff377a429eec2919157f2f4c0

SHA-1:
94413d9c847455ff13050bde90c321f0a5aa0e46

SHA-256:
ed36fa5c624b7714bd300303c59141dbbaffc1ef07de2289e02f05ba29db38bf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:32:36 PM UTC  (today)

File size:
757.5 KB (775,664 bytes)

Product version:
1.0.220.1

Copyright:
WinZip Computing

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\winzip20_downwz.exe

File PE Metadata
Compilation timestamp:
12/28/2015 7:28:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:WzvZkpxJWKe7rHkj+bF/rkS7d9PuaIYNVbrzWLWKVg5eEOB/LaIRNNEF8yqx4vR9:K4e7rHj6S7TFprzW9gQE4EF8y9Zjcm

Entry address:
0x373EE

Entry point:
60, 81, FD, 68, A2, 00, 00, 73, 08, 89, CB, 69, F7, 4E, 5E, 7D, AE, 0F, BD, F6, 87, F6, 84, E5, 87, CD, 43, 0F, BD, CF, 85, D8, FE, CD, 2B, C6, 0F, B3, DB, E8, 00, 00, 00, 00, 88, E8, 0F, CF, 0F, C1, C0, 84, FE, D0, C3, 8B, D7, 0F, A4, D2, 42, 45, 57, 0F, A5, E8, 0F, A4, ED, 0C, 0F, A5, C3, 5E, 8A, C0, 8A, CE, F3, 5F, EB, 05, 35, BA, 16, 52, FE, 85, F3, 0F, BA, F5, A5, 85, FD, 87, D6, 8B, C8, 53, 49, 42, D0, F9, 8A, E8, F7, DB, EB, 07, 8A, F0, C0, C2, 36, 0F, CE, 0F, AF, CB, 28, E9, 84, DE, 81, C7, B7, 3B...
 
[+]

Entropy:
7.2699

Code size:
353.5 KB (361,984 bytes)

The file winzip20_downwz.exe has been seen being distributed by the following URL.

http://www.winzipdownloadfiles.com/c?fallback_url=http://download.winzip.com/gl/nkln/winzip20_downwz.exe&x=fQJ1Zt1ukofRpgMkLEbriCFVk1ZGa2/5//GLxi CcgY=&downloadAs=winzip20-wz.exe&c=TN0SJJeYUV7EDPx7vDUre BnAvgDSvH7JWESkF4PvXaf7xtoYTIJ6KgidZoiNYOcbhTbs8qT KaxL33XSedhQDxP1IHbbi3vzPC0 C1cXIJ5D9jO6Xz7eMUj2dlrLwyu

Scan winzip20_downwz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.