» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit

Red Dog Media, Inc.

The application uninstall.exe by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit by Red Dog Media. This file is typically installed with the program PC Utility Kit by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

Red Dog Media (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit

Version:

3.2.4.0

MD5:

cb2c489bba2d96c1660e3bf3093bbe64

SHA-1:

40525fdbfaf1eba6b15fbbbfb8cdbf75fab61602

SHA-256:

e499bddbbddc1c2b23bd55ac1330f018324b066360ba5644337104e71056f660

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 4:48:51 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.RedDogMe.Installer

16.4.14.7

File size:

219.4 KB (224,648 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/9/2014 6:00:00 PM

Valid to:

6/9/2015 5:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

190FBF70C24A707672EE530C4AB3FC30

File PE Metadata

Compilation timestamp:

2/24/2012 12:20:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:g5BuYAVrgUCPn/UQT4OUOnFmJZNEo3HoVw3lKdoK:g50gUCPT4OUuFmP5qwVe

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

5.3365

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit

Display publisher:

Red Dog Media

Display version:

3.2.4.0

Uninstall string:

C:\Program Files (x86)\PC Utility Kit\PC Utility Kit\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit by Red Dog Media

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

www.pcutilitykit.com

About 62% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.