How to remove winzipersvc.exe.$quar
- File Details
- Overview
- Analysis
winzipersvc.exe.$quar
The module winzipersvc.exe.$quar has been detected as Adware.ELEX
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
0829cb73f335f56c9a6bc01e90ab0d95 |
| Size: |
1 MB |
| First Published: |
2017-05-28 04:14:09 (6 years ago) |
| Latest Published: |
2018-08-29 10:10:03 (5 years ago) |
| Status: |
Adware.ELEX (on last analysis) |
|
| Analysis Date: |
2018-08-29 10:10:03 (5 years ago) |
Overview
| Signed By: |
Chencheng Cai |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %sysdrive%\docume~1\admini~1\locals~1\temp\ist5bc.tmp\tools\wzp\omigazip_patch |
| %temp%\istd8c6.tmp\tools\wzp\omigazip_patch |
| %programfiles% |
| %temp%\ist84fb.tmp\tools\wzp |
| winzipersvc.exe |
| winzipersvc.exe.$quar |
| Windows 7 |
83.3% |
|
| Windows 8.1 |
11.1% |
|
| Windows XP |
5.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00094b06 |
| Name |
Size of data |
MD5 |
| .text |
764416 |
8e9dba61e460a76df2a4c003fcb3dbb5 |
| .rdata |
291840 |
39e6aec4840f58b54f7757ee3e762e0f |
| .data |
32256 |
3ee2f0d99c82ddc9b4383331ae08c370 |
| .rsrc |
1536 |
db0af8eb769562438c5a15de0292551f |
