» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit

Red Dog Media, Inc.

The application uninstall.exe by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit by Red Dog Media. This file is typically installed with the program PC Utility Kit by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

Red Dog Media (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit

Version:

3.1.5.0

MD5:

be9709e465cefe9b62d5579b26fd11ba

SHA-1:

4db7b8c1da5fc924e408370f6e6e61f3abf5a9c3

SHA-256:

a5052339b73822a9e05f94ce5e699fa23402cb3232a927eb9b670f6da8c3b38c

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/28/2024 4:20:40 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.RedDogMedia.J

14.5.28.11

File size:

237.5 KB (243,168 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

3/20/2012 8:00:00 PM

Valid to:

3/21/2013 7:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3E252606673E72704B095960C72696BF

File PE Metadata

Compilation timestamp:

2/24/2012 2:20:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:UGarUa6LowvuhdNYh2Gf9rg6hzGPnGQZs7PVJPuUfhPNpkdCs1oXyNWfKW3XoMQ:25BuYAVrgUCPnzsXZfhV2WS4o5

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

5.2863

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit

Display publisher:

Red Dog Media

Display version:

3.1.5.0

Uninstall string:

C:\Program Files\PC Utility Kit\PC Utility Kit\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit by Red Dog Media

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

www.pcutilitykit.com

About 62% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.