» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit AntiVirus

Red Dog Media, Inc.

The application uninstall.exe, “PC Utility Kit AntiVirus Uninstaller” by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit AntiVirus by Red Dog Media. This file is typically installed with the program PC Utility Kit AntiVirus by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

PC Utility Kit (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit AntiVirus

Description:

PC Utility Kit AntiVirus Uninstaller

Version:

2.1.1.0

MD5:

cdea43332c24bac874453e074608c19c

SHA-1:

ea40392514bfe1a566d83ec5beb18c3134a713f6

SHA-256:

e6728410bda37b025602787fad2da01604ff6f8d4e6e93e186266955c9a10b44

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 5:15:34 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.RedDogMedia.Installer

16.2.25.23

File size:

2 MB (2,090,512 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit antivirus\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/9/2014 5:00:00 PM

Valid to:

6/9/2015 4:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

190FBF70C24A707672EE530C4AB3FC30

File PE Metadata

Compilation timestamp:

2/24/2012 11:20:04 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:hv2eaQbxn+qF653A092N+70H/pRL8vYvvRscAg:TxTFaQW2N+gf9scAg

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

4.6276

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit AntiVirus

Display publisher:

Red Dog Media

Display version:

2.1.1.0

Uninstall string:

C:\Program Files (x86)\PC Utility Kit\PC Utility Kit AntiVirus\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit AntiVirus by Red Dog Media

Publisher's description - “Run the free scan to identify the issues affecting your system and register a full version of the software for just $29.”

www.pcutilitykit.com

About 72% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.