home

wzUninstall.exe

WinZipper

Yang Liu

The application wzUninstall.exe, “Winzipper uninstall application” by Yang Liu has been detected as a potentially unwanted program by 4 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WinZip by Winzipper Pvt Ltd..
Publisher:
Winzipper Pvt Ltd.  (signed by Yang Liu)

Product:
WinZipper

Description:
Winzipper uninstall application

Version:
2.0.0.1

MD5:
fcaabe6537da3fa67af80a7141c686f2

SHA-1:
8748c6e81240415366d326eec0b9322c34638887

SHA-256:
7125f7c9a423368aefca24169032111b67525f16e12ef7a8742f4ae2fd564022

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 4:01:14 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Mutabaha.1343, Adware.Mutabaha.1199
9.0.1.05190

ESET NOD32
Win32/ELEX.IC potentially unwanted application
8.0.319.0

F-Secure
Variant.Adware.Strictor
5.15.96

Microsoft Security Essentials
Threat.Undefined
1.223.2775.0

File size:
1 MB (1,054,360 bytes)

Product version:
2.0.0.1

Copyright:
Copyright (c) 2015 Winzipper Pvt Ltd. All Rights Reserved.

Original file name:
wzUninstall.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winzipper\wzuninstall.exe

Digital Signature
Signed by:
Yang Liu

Authority:
thawte, Inc.

Valid from:
4/19/2016 2:00:00 AM

Valid to:
11/26/2016 12:59:59 AM

Subject:
CN=Yang Liu, OU=Individual Developer, O=No Organization Affiliation, L=Beijing, S=Beijing, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6F245CD10782C354F8265551BE5F41E0

File PE Metadata
Compilation timestamp:
4/22/2016 10:47:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:69HIrUhMWS4MU5Ipe3KY4ezhC6pTUqc47++zs:69I/DaA6pTUqc4C+zs

Entry address:
0x81EB6

Entry point:
E8, 7E, 66, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 85, F6, 75, 13, E8, A4, 2C, 00, 00, 6A, 16, 5E, 89, 30, E8, 7E, 3A, 00, 00, 8B, C6, EB, 24, 68, 80, 00, 00, 00, FF, 75, 10, FF, 75, 0C, E8, 17, 00, 00, 00, 83, C4, 0C, 89, 06, 85, C0, 74, 04, 33, C0, EB, 07, E8, 74, 2C, 00, 00, 8B, 00, 5E, 5D, C3, 6A, 0C, 68, 90, 75, 4D, 00, E8, 2F, 4A, 00, 00, 33, C9, 89, 4D, E4, 33, C0, 8B, 7D, 08, 85, FF, 0F, 95, C0, 85, C0, 75, 17, E8, 4B, 2C, 00, 00, C7, 00, 16, 00, 00, 00, E8, 24, 3A, 00, 00, 33, C0...
 
[+]

Code size:
664.5 KB (680,448 bytes)

Program Uninstaller
Program name:
WinZip

Display publisher:
Winzipper Pvt Ltd.

Display version:
2.0.30

Uninstall string:
C:\Program Files\WinZipper\wzUninstall.exe


Remove wzUninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.