» Uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Uninstall.exe

Uninstall Application

Chelsea Marketing LLC

The application Uninstall.exe, “CLEANPC365 Uninstall Application” by Chelsea Marketing has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program CLEANPC365 by Chelsea Marketing. This file is typically installed with the program CLEANPC365 by Chelsea Marketing which is a potentially unwanted software program.

File name:

Uninstall.exe

Publisher:

Chelsea Marketing (signed by Chelsea Marketing LLC)

Product:

Uninstall Application

Description:

CLEANPC365 Uninstall Application

Version:

1, 0, 0, 2

MD5:

6c96b73b3fbb88409fd26f21bb2d6348

SHA-1:

2527d92d36efd839fffd950066319effd39e3f2f

SHA-256:

47c621922b0f07dc644337debeb1259ac4a4a3b7389ed02a38c0372edbf41eee

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/25/2024 11:49:57 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.ChelseaMarketing

15.1.12.12

File size:

69.5 KB (71,176 bytes)

Product version:

1, 0, 0, 2

Original file name:

Uninstall.exe

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\cleanpc365\cleanpc365\uninstall.exe

Digital Signature

Signed by:

Chelsea Marketing LLC

Authority:

Thawte, Inc.

Valid from:

11/4/2013 1:00:00 AM

Valid to:

11/5/2014 12:59:59 AM

Subject:

CN=Chelsea Marketing LLC, O=Chelsea Marketing LLC, L=Lawrence, S=New York, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

58049128CC0F5C55478DB1B59347D3E9

File PE Metadata

Compilation timestamp:

11/5/2013 8:50:07 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:GRbpMKgkwT54E/7tWa47w9dXqMRDxbq2sDf:0beKgkwT54etCM9dXqexbq2sDf

Entry address:

0x2854

Entry point:

48, 83, EC, 28, E8, 0F, 1F, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 7C, 24, 18, 55, 48, 8B, EC, 48, 83, EC, 60, 48, 8B, FA, 48, 8B, D9, 48, 8D, 4D, C0, 48, 8D, 15, 05, 7B, 00, 00, 41, B8, 40, 00, 00, 00, E8, DA, F6, FF, FF, 48, 8D, 55, 10, 48, 8B, CF, 48, 89, 5D, E8, 48, 89, 7D, F0, E8, FC, 48, 00, 00, 4C, 8B, D8, 48, 89, 45, 10, 48, 89, 45, F8, 48, 85, FF, 74, 1B, F6, 07, 08, B9, 00, 40, 99, 01, 74, 05, 89, 4D, E0, EB, 0C, 8B, 45, E0, 4D, 85, DB, 0F, 44, C1, 89, 45... 
[+]

Code size:

32.5 KB (33,280 bytes)

Program Uninstaller

Program name:

CLEANPC365

Display publisher:

Chelsea Marketing

Display version:

1.12.0

Uninstall string:

"C:\Program Files\cleanpc365\CLEANPC365\Uninstall.exe" Remove

The file Uninstall.exe has been discovered within the following program.

CLEANPC365 by Chelsea Marketing

CLEANPC365 is marketed as a PC performance optimizer that utilizes several techniques to attempt to increase the speed of the user's PC include registry tuning (which is a practice that is often criticized by experts as producing no results) as well as hard drive scrubbing.

www.cleanpc365.com/faq.aspx

About 58% of users remove it

Remove Uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.