home

winzipdu.exe

WinZip Driver Updater

WinZip Computing LLC

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
WinZip Computing, S.L. (WinZip Computing)  (signed by WinZip Computing LLC)

Product:
WinZip Driver Updater

Version:
1.0.648.16566

MD5:
66af53a3be0656c606cb73237b8145b3

SHA-1:
8c464565e59c900c6735b819285d563d44210716

Scanner detections:
16 / 68

Status:
Clean  (16 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 5:16:51 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Generic.1286181
364

Agnitum Outpost
Riskware.Agent
7.1.1

AVG
DriverCleaner.SysTweak
2017.0.2842

Bitdefender
Adware.Generic.1286181
1.0.20.185

Bkav FE
W32.HfsAdware
1.3.0.7062

Emsisoft Anti-Malware
Adware.Generic.1286181
8.16.02.06.11

ESET NOD32
Win32/Systweak.R potentially unwanted
10.12103

Fortinet FortiGate
Riskware/Systweak
2/6/2016

F-Secure
Adware.Generic.1286181
11.2016-06-02_7

G Data
Adware.Generic.1286181
16.2.25

K7 AntiVirus
Adware
13.2016902

McAfee
Artemis!CDB6FD0CDB34
5600.6498

MicroWorld eScan
Adware.Generic.1286181
17.0.0.111

Qihoo 360 Security
Win32/Virus.fe8
1.0.0.1015

Sophos
Generic PUA EI (PUA)
4.98

VIPRE Antivirus
Trojan.Win32.Generic
42940

File size:
10.8 MB (11,344,040 bytes)

Product version:
1.0.648.16566

Copyright:
Copyright (C) 2011 Systweak Inc., All rights reserved.

Trademarks:
WinZip Driver Updater

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\winzip driver updater\winzipdu.exe

Digital Signature
Signed by:
WinZip Computing LLC

Authority:
GlobalSign nv-sa

Valid from:
7/9/2013 6:49:58 PM

Valid to:
7/10/2015 6:49:58 PM

Subject:
E=help@winzip.com, CN=WinZip Computing LLC, O=WinZip Computing LLC, L=Storrs Mansfield, S=CT, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112144096D1CB7E1128D086CAB8DEEAB88F2

File PE Metadata
Compilation timestamp:
2/3/2015 6:46:53 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:nozy+eDKfMlUWBIbFg5yNikXcS/6ODhwSgP+/kqMf3:ozBxfFWgg5c9/4f3

Entry address:
0x105765

Entry point:
E8, F0, B1, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, A8, 57, 82, 00, 75, 02, F3, C3, E9, 72, B2, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 9A, 6A, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, AE, 06, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 38, B3, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 77, 71, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73...
 
[+]

Code size:
3.7 MB (3,905,536 bytes)

Scheduled Task
Task name:
WinZipDriverUpdater_UPDATES

Path:
C:\WINDOWS.0\Tasks\WinZipDriverUpdater_UPDATES.job

Trigger:
Weekly (Runs weekly on Wednesdays at 11:51)


Scan winzipdu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.