home

del_del_signup wizard.exe

JDI BACKUP LIMITED

The application del_del_signup wizard.exe by JDI BACKUP LIMITED has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program ZipCloud by JDI BACKUP LIMITED.
Publisher:
ZipCloud  (signed by JDI BACKUP LIMITED)

Product:
ZipCloud

Description:
Signup Wizard

Version:
1.0.0.0

MD5:
db13710a8fe56518da270817c7a8d8d2

SHA-1:
c7fa57e7026b7ef728de227195b1f199230449f9

SHA-256:
e1511954851f37dd679771b441d36a8ee1d68bed76bb05252fcc4faf8578ca19

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 9:24:11 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win64.Generic.JDIBACKUP.Meta
15.8.31.11

File size:
2 MB (2,064,424 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © ZipCloud 2011

Original file name:
Signup Wizard.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\zipcloud\del_del_signup wizard.exe

Digital Signature
Signed by:
JDI BACKUP LIMITED

Authority:
VeriSign, Inc.

Valid from:
2/22/2012 6:00:00 PM

Valid to:
2/21/2015 5:59:59 PM

Subject:
CN=JDI BACKUP LIMITED, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=JDI BACKUP LIMITED, L=Havant, S=Hampshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
35E738AE8513757EEEC7C3A8DC10E470

File PE Metadata
Compilation timestamp:
7/1/2013 11:49:53 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:HS3MQ6nIIz/5xHSljc6XKry+bHtxf05gL2Gb5Pn0Jmw:y8jIMRxHSljcEKPbNxf05g2M5Pn0JN

Entry address:
0x18B01A

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 80, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3314

Code size:
1.5 MB (1,610,240 bytes)

The file del_del_signup wizard.exe has been discovered within the following program.

ZipCloud  by JDI BACKUP LIMITED
ZipCloud is part of the Just Develop It! group of Backup brands that offers web hosting and online backup services run by JDI Backup (the parent company to similar brands MyPCBackup, Backup Genie and JustCloud).
www.zipcloud.com
58% remove it
 
Powered by Should I Remove It?

Remove del_del_signup wizard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.