home

winzip19-ootf.exe

WinZip

WinZip Computing LLC

Publisher:
WinZip Computing, S.L.  (signed by WinZip Computing LLC)

Product:
WinZip

Description:
WinZip Installer

Version:
1.0.25.1

MD5:
f49c847ca716e14d9d0646ac6f578e08

SHA-1:
45b207e286177ce9046981040d4cabb8bd3096bc

SHA-256:
20a2bb98b010df63bcfb082683ab972a0daf7125dc3c73cdcb8fb7da17546d6f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 2:42:29 AM UTC  (today)

File size:
697.6 KB (714,376 bytes)

Product version:
1.0.25.1

Copyright:
WinZip Computing

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\winzip19-ootf.exe

Digital Signature
Signed by:
WinZip Computing LLC

Authority:
GlobalSign nv-sa

Valid from:
4/17/2015 5:05:21 PM

Valid to:
4/17/2016 5:05:21 PM

Subject:
E=help@winzip.com, CN=WinZip Computing LLC, OU=IT, O=WinZip Computing LLC, L=Storrs Mansfield, S=CT, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D1D8286B82393399C853E44FF8AA3854

File PE Metadata
Compilation timestamp:
5/11/2015 12:44:27 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:eq07oFUAS9G0r/D0M+GY7hDgF8C0CwzLKJRNNEF8yqO4viPK0tBMyN:eeC1TD0M2DgFWCOLKnEF8yiIK0tBR

Entry address:
0x1F562

Entry point:
E8, 40, A4, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, FA, 43, 00, E8, C8, 32, 00, 00, E8, 9F, 4F, 00, 00, 0F, B7, F0, 6A, 02, E8, D3, A3, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 8B, 85, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.9376

Code size:
205 KB (209,920 bytes)

The file winzip19-ootf.exe has been seen being distributed by the following 2 URLs.

http://download.winzip.com/.../winzip19-ootf.exe

http://www.wzinstall.com/download?key=111310C9F786E79EB2D4F30B10EFB16D475BAFB8F21EABC7C0300BDDD022516655BA274D5BEC722A

Scan winzip19-ootf.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.