» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit

Red Dog Media, Inc.

The application uninstall.exe by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit by Red Dog Media. This file is typically installed with the program PC Utility Kit by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

Red Dog Media (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit

Version:

3.2.0.0

MD5:

c5ada79e6693d0d166b395399cd71fde

SHA-1:

86b127d01e5725c707f2b478264a9006ba71272a

SHA-256:

a4866545c7b4704a3d868ac4af73ff547f5ac7b5830712b335fb4f5a1941528d

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 2:55:07 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.RedDogMedia.J

15.1.13.18

File size:

182.7 KB (187,104 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

5/6/2013 7:00:00 PM

Valid to:

5/7/2014 6:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7BDD59F0011C63DAEAAC6B43E7CAA6C7

File PE Metadata

Compilation timestamp:

2/24/2012 1:20:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:D5BuYAVrgUCPn/UQT4OornFmJZNEo3HoJ:D50gUCPT4OorFmP5q

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

5.4195

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit

Display publisher:

Red Dog Media

Display version:

3.2.0.0

Uninstall string:

C:\Program Files (x86)\PC Utility Kit\PC Utility Kit\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit by Red Dog Media

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

www.pcutilitykit.com

About 62% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.