home

Uninstall.EXE

Uninstall 应用程序

Chongqing QuWan Technology Co., Ltd.

Publisher:
重庆趣玩科技有限公司  (signed by Chongqing QuWan Technology Co., Ltd.)

Product:
Uninstall 应用程序

Description:
Uninstall Microsoft 基础类应用程序

Version:
2, 0, 0, 0

MD5:
f04d809462eaaf6bea5628f43f6ce005

SHA-1:
cbc24016211ab2c843ef30904b4ad06afe041d81

SHA-256:
e3e5e2a51f03f9dd6ca40a82699dafaceab5432f6d4781aa7dca8a92d66fc4e3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:48:05 AM UTC  (today)

File size:
227.4 KB (232,816 bytes)

Product version:
2, 0, 0, 0

Copyright:
重庆趣玩科技有限公司版权所有 (C) 2015

Original file name:
Uninstall.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\bin\uninstall.exe

Digital Signature
Signed by:
Chongqing QuWan Technology Co., Ltd.

Authority:
WoSign CA Limited

Valid from:
2/13/2015 11:58:16 AM

Valid to:
3/13/2016 11:58:16 AM

Subject:
CN="Chongqing QuWan Technology Co., Ltd.", O="Chongqing QuWan Technology Co., Ltd.", L=Chongqing, S=Chongqing, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
18AD187BD1370732A4DEEE0367218BD1

File PE Metadata
Compilation timestamp:
11/17/2015 4:58:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:AEiXu5YQO5FJJ0O7gOiUTBkv9jdItn2HC:su5YQaFiObTav9C

Entry address:
0x25C21

Entry point:
55, 8B, EC, 6A, FF, 68, 00, CD, 42, 00, 68, 6A, 5F, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, F4, 82, 42, 00, 59, 83, 0D, 20, 67, 43, 00, FF, 83, 0D, 24, 67, 43, 00, FF, FF, 15, F8, 82, 42, 00, 8B, 0D, 0C, 67, 43, 00, 89, 08, FF, 15, FC, 82, 42, 00, 8B, 0D, 08, 67, 43, 00, 89, 08, A1, 00, 83, 42, 00, 8B, 00, A3, 1C, 67, 43, 00, E8, 0D, 03, 00, 00, 39, 1D, 10, 57, 43, 00, 75, 0C, 68, 9A, 5F, 42, 00, FF, 15, 04, 83...
 
[+]

Entropy:
6.4836

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
156 KB (159,744 bytes)

Scan Uninstall.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.