home

wzUninstall.exe

WinZipper

北京智明腾亿科技有限公司

The application wzUninstall.exe, “Winzipper uninstall application” by 北京智明腾亿科技有限公司 has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WinZip by Winzipper Pvt Ltd..
Publisher:
Winzipper Pvt Ltd.  (signed by 北京智明腾亿科技有限公司)

Product:
WinZipper

Description:
Winzipper uninstall application

Version:
2.0.0.1

MD5:
740a37aa6ba2bcc5c62d50bb0a151813

SHA-1:
4089800754037d1afc80ffc355340dae96d42d03

SHA-256:
f7d4b2c79108348f6f3408f9ae15202bde12f45bc969e97a32fa07a32ef4cff7

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
1/13/2025 5:26:10 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Elex.Winzipper (M)
16.10.23.7

File size:
2.1 MB (2,196,120 bytes)

Product version:
2.0.0.1

Copyright:
Copyright (c) 2015 Winzipper Pvt Ltd. All Rights Reserved.

Original file name:
wzUninstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winzipper\wzuninstall.exe

Digital Signature
Signed by:
北京智明腾亿科技有限公司

Authority:
GlobalSign nv-sa

Valid from:
12/14/2015 3:57:34 PM

Valid to:
12/14/2016 3:57:34 PM

Subject:
CN=北京智明腾亿科技有限公司, O=北京智明腾亿科技有限公司, L=北京, S=北京, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121333A0B1EA5C37487BE5B034CE7E548C2

File PE Metadata
Compilation timestamp:
3/28/2016 10:32:16 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:oJ40q0FAajRQ3yEJi6gCKMt4RADqgb/iTKwtqOt7x8y:oTFl+mRaqTKwUOtSy

Entry address:
0x85566

Entry point:
E8, EE, 65, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 75, 13, E8, 18, 2C, 00, 00, 6A, 16, 5E, 89, 30, E8, EE, 39, 00, 00, 8B, C6, EB, 24, 68, 80, 00, 00, 00, FF, 75, 10, FF, 75, 0C, E8, 17, 00, 00, 00, 83, C4, 0C, 89, 06, 85, C0, 74, 04, 33, C0, EB, 07, E8, E8, 2B, 00, 00, 8B, 00, 5E, 5D, C3, 6A, 0C, 68, E8, B4, 4D, 00, E8, 9F, 49, 00, 00, 33, C9, 89, 4D, E4, 33, C0, 8B, 7D, 08, 85, FF, 0F, 95, C0, 85, C0, 75, 17, E8, BF, 2B, 00, 00, C7, 00, 16, 00, 00, 00, E8, 94, 39, 00, 00, 33, C0...
 
[+]

Code size:
681.5 KB (697,856 bytes)

Program Uninstaller
Program name:
WinZip

Display publisher:
Winzipper Pvt Ltd.

Display version:
2.0.14

Uninstall string:
C:\Program Files (x86)\WinZipper\wzUninstall.exe


Remove wzUninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.