» tubedimmerremovaltool.exe
Overview
Analysis
File Details
Programs (3)

tubedimmerremovaltool.exe

Security Stronghold LLC

The application tubedimmerremovaltool.exe by Security Stronghold has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. Additionally, the file is typically installed by a number of programs including Spigot Toolbar Removal Tool by Security Stronghold and Torn TVRemoval Tool by Security Stronghold, both potentially unwanted software.

File name:

Publisher:

Security Stronghold (signed by Security Stronghold LLC)

Version:

1.0.0.154

MD5:

b10bd93a41a5ca30601fe5bcb9cdc70e

SHA-1:

52c8c77b2e1911c1175512a18cb49ef98b910fc2

SHA-256:

10895f33baa694469fe611bf8607206cd7bc55ecdaaba34d31a67010b2cdc277

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 12:55:19 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.12.26.10

File size:

5.3 MB (5,588,432 bytes)

Product version:

1.0.0.154

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\tube dimmer removal tool\tubedimmerremovaltool.exe

Digital Signature

Signed by:

Security Stronghold LLC

Authority:

GlobalSign nv-sa

Valid from:

10/14/2013 11:55:31 AM

Valid to:

12/11/2014 4:49:56 AM

Subject:

E=manager@securitystronghold.com, CN=Security Stronghold LLC, O=Security Stronghold LLC, L=Astrakhan, C=RU

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121ACD1A0DCFFA94069288588DCC5FFCF18

File PE Metadata

Compilation timestamp:

11/29/2013 6:43:26 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x3FFD7C

Entry point:

55, 8B, EC, B9, 0A, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, B8, 74, DE, 7E, 00, E8, 18, C1, C0, FF, 8B, 35, 8C, F8, 85, 00, 33, C0, 55, 68, 92, FF, 7F, 00, 64, FF, 30, 64, 89, 20, 8D, 55, E4, 33, C0, E8, 16, 4E, C0, FF, 8B, 45, E4, 8D, 55, E8, E8, 8B, 3C, C2, FF, 8B, 45, E8, 8D, 4D, EC, 33, D2, E8, 8A, 3A, C2, FF, 8B, 55, EC, 8B, C6, E8, 2C, 80, C0, FF, BB, 02, 00, 00, 00, 8D, 45, DC, 8B, 16, 0F, B7, 54, 5A, FC, E8, FC, 8A, C0, FF, 8B, 45, DC, 8D, 55, E0, E8, C9, 1C, C2, FF, 8B, 45, E0, 50, 8D... 
[+]

Entropy:

6.6248

Developed / compiled with:

Microsoft Visual C++

Code size:

4 MB (4,189,184 bytes)

The file tubedimmerremovaltool.exe has been discovered within the following programs.

My Search Dial Removal Tool by Security Stronghold

During installation, the Security Stronghold Removal Tool utility will provide various bundled applications including RegClean Pro registry cleaner. It will then download utilities from its server and scan the user's PC.

www.SecurityStronghold.com

60% remove it

Spigot Toolbar Removal Tool by Security Stronghold

Distributes a version of SpyHunter by Enigma Software Group with various offers.

68% remove it

Torn TVRemoval Tool by Security Stronghold

52% remove it

Remove tubedimmerremovaltool.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.