» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit

Red Dog Media, Inc.

The application uninstall.exe by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit by Red Dog Media. This file is typically installed with the program PC Utility Kit by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

Red Dog Media (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit

Version:

3.1.5.0

MD5:

4f77524e5b4cb8dd40a9be4ce8a9f2bd

SHA-1:

f60bdc0d6dec1fd94654fda45f464d9ff3f3e2e0

SHA-256:

198e5f27658c6bbca304f1fd2123eb777b943a6c77e8aa613c27ccc4a2ca6d84

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 5:13:38 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Installer

15.4.7.14

File size:

237.3 KB (243,016 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

3/20/2012 7:00:00 PM

Valid to:

3/21/2013 6:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3E252606673E72704B095960C72696BF

File PE Metadata

Compilation timestamp:

2/24/2012 1:20:04 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:gGarUa6LowvuhdNYh2Gf9rg6hzGPnGQZs7PVJPuUfhPNpkdCs1JXauNWfKW3Xoam:i5BuYAVrgUCPnzsXZfhVhEWS4oEk

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

5.2866

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit

Display publisher:

Red Dog Media

Display version:

3.1.5.0

Uninstall string:

C:\Program Files\PC Utility Kit\PC Utility Kit\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit by Red Dog Media

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

www.pcutilitykit.com

About 62% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.