home

wzsysutil.exe

WinZip Computing

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
WinZip Computing  (signed and verified)

MD5:
423d59e73fce7a3fd61c81dc5a597d75

SHA-1:
f29b2e42dd3e3f4039cf3382e26881463eb83a6b

SHA-256:
36bf8ffabaac3b694154160c6f5fb3efc79406e5c98d9bc0e02d645b4bbcecb2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 3:29:43 PM UTC  (today)

File size:
24.2 MB (25,363,792 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wzsysutil.exe

Digital Signature
Signed by:
WinZip Computing

Authority:
VeriSign, Inc.

Valid from:
4/13/2009 8:00:00 PM

Valid to:
4/13/2012 7:59:59 PM

Subject:
CN=WinZip Computing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WinZip Computing, L=Mansfield, S=Connecticut, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2091EC663B9B070DEF16CA9A237B705B

File PE Metadata
Compilation timestamp:
11/2/2009 3:24:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:A/p2IY3u9b8LN3hdXQzcjtPTsnBuGi2TLLsgwcyQpeHE1ea0gGI/sX7V8ihoM9A:A/p2IGu9+Y4PTA22TWcjpeHBF9oMu

Entry address:
0x1479F

Entry point:
E8, 02, 67, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D8, C9, 42, 00, 75, 02, F3, C3, E9, 82, 67, 00, 00, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 18, 48, 41, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 54, E6, 00, 00, 8B, 45, 0C, 8B, 40, 04, 83...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
144 KB (147,456 bytes)

The file wzsysutil.exe has been seen being distributed by the following 14 URLs.

http://dw.uptodown.com/dwn/0yZQjC2fdtpO3I87VlRbYT52nxRK9VvyI9W464guPzT1g-CAzZ77ONtFgJ6ASC5EHtbhvOHRoU9xKofjk826sP5qeoqwpVEvCbNfMG7shyN-r9lQ_vbqh-T2NQwrK_iY/5XTemRQ02jmNWBSx5r6KPwYKVq1WOrfbjgrKJsjFeso4vKTAUwYiuIR5PPZDSWiZyq7mBjaiHpGwXMOQ2-0yycTYrXk7_Iu3IPNWolw-XUYsvxAF8AwmagNdLdaefvSB/28uhMWhX_3Cda1mq6fWAZ85gx2eT9fxMMW2gUsBPWNLoVqwMgmueonGZK2_IPX63U3WLucFrutF95qAXTADuaBOANpw82o9XxCV4Ao36jKNRJ0NbX5Dc_04aMYlC9Oxd/.../

https://dw.uptodown.com/dwn/J0XoOoIu6WYIWZHJZ0mVAl8wL4IElglcnQRDfl74_odeUfe66Qfauwy-WXoJOeH5QLolhDCn97-6Xjw9PLjHICafz0dq7VuuOskxKdfkEDE6Mxqx7_voFVa8Avi8xBAa/ZrcPI-1M9sJYdSgcp2ahS99-vZi8CwYmyOKxybXF7u-2_GZL_ncolzLEJQ9eTQhyQYA3vfLLxPN8zPETPUxjROwr8GfrgG3D47ZsYZ-FV7gpx1JE7EaF3Hb37lQiaRSR/Sh4AYaq96IcELB6Pzwn5kL6UDOauoT7O9bED8EgCn8DGbqY-YrKRF7v2Vl-QE1c223pkLIHl61IdLjE_tODt8IjdctCtw1VS9tkhtuBFj0V4mAj2m0SSZtitTf1U2n2Y/.../

https://dw.uptodown.com/dwn/mTN8bolZIubxFz_mIBeGgQT8dHq-xnQ_2Etj9WXfgoWo2MkibZP7MhbvqS-IMN2OXln18srzKMgm2x52bagF4aoS6aF_KPwo5cIx1kEV3QEbPbTbJzeTW9m27Lsx3Mqh/DVGUqDHB61CyffJrY3J7Y5ni7Rp-0RaR_SgKZqAFnl_TU6osb2jQO9i0bxcZMFDjMCZkdAKwfVKNhJ967u3IHnwWL-WSOVufwpcK3SvyYM7OFBHAfDuykLbvwIZpzNBD/vInLWNeWuQLTbe2NMpeWb0P25ZZoPNR-dOx5Wxa6UdG5SLJShpsWe7PUozG9kn4XMNtQ3p49XtLsP1exikgZW4as-OuPf3NCsvEGNp5FARLi7r__gYbW19IJimgdJP9g/.../

https://dw.uptodown.com/dwn/sYgs8Bc1BlMXB90n6isGIhLwySwTQc6-gVa4LQO_Ls7nImWSrV4QE10pQGYsRZnM2FYOgihth2DMWxhiUGiTuabStUasJHDgo_9n0-Ui2blhVYFdYM95emS_ECf92ULJ/xP1KCZNC35T-AKiNmKunbftNZYq0DkqadYM0OqarS5IioNHENiY7Qo-4nq9XRdFNYzOGi5_cTZIQ8kkMZLcYS4pSn9FOc00b2Rcy48xODxlL1voYcyh2rKWJgz1p-c8o/wvL3x2DgMMhniglEm7UdGw8i9AhEJeSyCFzkfAObVazuIsJgaorRdbdLIVU5N55ipOnUZVJLVgXi5cg139I-RdV59O92NOlfk64fDTMOlr63qMeroUq3R93FTohmptaX/.../

https://dw.uptodown.com/dwn/N8j2IJ88fyYdBx_BIvEA9nXIBlQKKB7MUssiIjwJjC486fLlDdPvxxim16RMURvA5mCoHaVzO-tv89zulxPv9kRX76MxBxb9oVqL6AMJAPf8JmYpqkT7XfSWV8IFNZbF/xB7C_PiVLDkNnStPiIXIiXLFcVo11BTGdVMKg0UYhoossNWhL3FvZd_Nn51grVsPLDPXBrQTTSLI_Me_A1WQygvnH6sGu_Lh1SWsh5nhJn3gAVvWm09lCrDwZdCkyt_7/zey-CGKBDG1DYW4alUVHiDJ4Mz7ntUeG5e5LXuAD8JZDchlXxB1kdmwIPcOEE9exC1WlJV45icShZpFcSkq1NP3SmnRjeqeL7Lm02cTLc6OpISTPON3HhaA34rnBAq02/.../

http://dw.uptodown.com/dl/1448068038/.../winzip-system-utilities-suite-1-0-en-win.exe

http://dw.uptodown.com/dwn/yA_-MjVWCMsYrkVUmFkl29UTI-A8ghW0uLSZOnOoXJsHfgw_37nlrOFcMEyA7-lFHlZ3vtIRf3xp_IBtCZR5hIpTG2YB7ILcoAfKwAE8_lBBKPRhHPa2JjKouFYJDGba/glS-CFPeO-6kbZHti3GskBWAfadinhHuO5XUHzWFxkiVLFCc_kSzpq-zIagpkarYXd17yxMldXs2BbV4X9R4Dn-SLOlOUKq0U2rXl50fTKYuWwAEiuDiQaz36fXXgtT-/7ZKgMgWXl0onowVc3tANrJ9X3IPIEASLYIDl7yZm5cJNrwKMej_8PLNG1yUdn5jVADL3O-pxPntrjBcYe2r00LzhKPttxrur7edG-pUOMVG5DzlrKxETDw2XsnHSVn0M/.../

http://dw.uptodown.com/dwn/OxFugjxm8MxMB4Eep2yEbKODyq3WCW1iixGv-94XKkqonIe6XwTmz508zNwpUSYH2eULN4Fq1QWIN_NK-NBWMsW55FX-6lWEFj_syolxqyRtA6_RoL_Cph3Tl3QPH2cG/hebSEBhBzmTVMeGQylCyFtERwmrcovHdAxuAR88ONhZJI-sRr29V_lLbdctQuPCodUK176uaY7iq3Vv6DUGXxD4NlDgYH06OZ16iq7Cx1IdP3lD_ePwCj8YYk4j0mt0w/.../

http://dw.uptodown.com/dwn/y4LewJkJf2mNUSUH7QPxPNr9Dmj1nelY56iKDezVAiOzgtCnYryyEYIF42Kx1YfnaWX1Dcgc6f9hVh29f2kxsvePp82dCmUb_qw4DUi5MNzQlwEhyy3vCq6Gzi4va59f/BxjVBuZ5eDpHvxGRuJw-YeUxZ33pm1jwPsFyV15Gpez9BA88zw-RwWPbpPtNRTo75vWsT9BO1qPJDxgrA7S0uINfZIRSb-uAl05oMHXQZ4uhTDcBE20q-ckibez2Jjm_/LqNU6fKfvViAGafh_3j4SJhHq0_4dAtgcwY8iq6usAZMB4ySLIJDEoRHxLjgxriiSxR3KKbQitu1d6azjia96lEqwFe9mwhu-7-F6ekowP55YBhdvWwoAK6eO2duJhEL/.../

https://dw.uptodown.com/dwn/mTsl4KORonntu_4YvmVK0oed2a8LnehZF5tth-OXtxQ_x15NJV7eOYPPgUcdbhOOzBO6xThMIb9XEaLWe3ZrCzDzgOgYJOMx07ydXzSIpYIUDhLaxkCPs5gp0aGUi-lY/AZkyHJ7BI7SwDMD4lwwCAchoOP08HgCnATnGgZx9JyErQmfPxtE_ilZjx942aoz3tHC7rmt3NvqbX6RnvqJ82RpNVmRxZxyKQyHOT2mgdzntWkvSdxv3UWmfYRQiVr0m/pkWuQ31Oa6xhf4d6fiVoft9VfaUylugQu54_nPb77welfiPSt41UtnIwt7at9_7fbtMA1sXcQN9aXKypDkiQsZJ0cDJZfuMuDtn61bSXbqqDHerfNZL__hR6nU-as8Xn/.../

http://dw5.uptodown.com/dwn/SD6YMMiUAOMeZTHQYdF_5txqeuTm-uAG9qs3SQ-mtdJmmMnsqX7aqr63klObpz0GpuVPf4Sh-S2t3kzpaEG2mHT5mD1BeXLf2GuZ34h4V7PCWNbLa-1ALzWk4-EkieWM/H1slX22_iA_INI28GyRlr9aVA_tCAsT9LRRF73ozEE3OC3LFt7Y_40pYg7Rn1aKRRayM36NL1YLnfKXXMLY14sOys2-QBxELqsU-dNNk0lWpJpVwG0gIYPWYOlxaoOJJ/4nM5ibe9UkCEp8jbqntdsbIdjqdtKWnvvgIKLg7cS-lLW7VcAA3JZluXU5THzezCPm0NMw-WZ4m43wwQKaP7mXOferb0DOn1gfv-5L8GvQuQJUVHQ5W52tsIS-O_857M/.../winzip-system-utilities-suite-1-0-en-win.exe

http://dw.uptodown.com/dwn/hloiRWSGJzROV6zCLB4dpdrOMYGak5nShZBpema1tlK3h9MEy2BTu5H1dAwv_esF9l7iAKTe85y6MOtbI4TGsuamU-cfHhSA_w86d8CWrgOlT7j7_hERxTLLxj_zHzF4/-EiAQZDP2ZDfpK2Ecxpgps0-Ep9zFWq-btQ0dTXesBHlEJCvAfIGFk8hw9vOHM5b3Q56TrB9B27TFPZNlx56_l2LaGHI10bwrM0lf7ImEvd9zU8qWeMgzXSRfxlyOOHL/CATJgqoStekD0aoefE_7YhKZUMuY1zMy8r2TvW5244RveQNiNMPsx13EpPteZbQZBGWuGXtt219wKL1bhba52WQ6wOv8wj7UzlRg7eeOI4mcli_L0doP4Jw7bMt9k_un/.../

http://dw.uptodown.com/dwn/BrqQvE8XBrMOyJiRRFqe3UZ_weNdeVodDowb0gtiP69NA_tsrSiQrIPXHFcvH6xrsWx2qtk6K9usbzvEPunCjXNMt5t_fJD7IG1aEEshKUFQlLqSEGI8OlmeHzz_mDQH/M69bQ-JHr2ODz0Ub0RaFJitXUSpSlslHYbRHYG2t1zI8NC_yYyA0aHE3uYXaT5hXdGFchjylvtwuhuGxFQM0Hn7UT0c2TkIbYwG8edbhMIaau_Ay-OiafpovCJkbRr4n/QVeLcQ-paxhHzI02BuIoo_6_JAPoKBCRW48fy6LZsA6ChqangoOxKD0i1D4h4W75bNqmq-K1JsPn0gBkTKXCmLgDheQailft7OgeY_Ou3l1kUZ72HG3GW4a_JSw4iers/.../

http://download2.winzip.com/.../wzsysutil.exe

Scan wzsysutil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.