» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

PC Utility Kit

Red Dog Media, Inc.

The application uninstall.exe by Red Dog Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program PC Utility Kit by Red Dog Media. This file is typically installed with the program PC Utility Kit by Red Dog Media which is a potentially unwanted software program.

File name:

uninstall.exe

Publisher:

Red Dog Media (signed by Red Dog Media, Inc.)

Product:

PC Utility Kit

Version:

3.2.0.0

MD5:

3d2bc3482885414d3ba402b4ecfe49f4

SHA-1:

fd3258a6b467d4b531360d8b30193e2b1a6f1e2a

SHA-256:

91b9b88327fa5d4e5cd191ec27545f0c5b6ee3f741239268d557633069fdf3b3

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/24/2024 2:57:43 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.RedDogMedia.J

14.9.26.0

File size:

182.7 KB (187,104 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\Program Files\pc utility kit\pc utility kit\uninstall.exe

Digital Signature

Signed by:

Red Dog Media, Inc.

Authority:

VeriSign, Inc.

Valid from:

5/6/2013 4:00:00 PM

Valid to:

5/7/2014 3:59:59 PM

Subject:

CN="Red Dog Media, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Red Dog Media, Inc.", L=Henderson, S=Nevada, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7BDD59F0011C63DAEAAC6B43E7CAA6C7

File PE Metadata

Compilation timestamp:

2/24/2012 11:20:04 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

3072:f5BuYAVrgUCPn/UQT4OornFmJZNEo3Ho+:f50gUCPT4OorFmP5d

Entry address:

0x38AF

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00... 
[+]

Entropy:

5.4198

Packer / compiler:

Nullsoft install system v2.x

Code size:

29 KB (29,696 bytes)

Program Uninstaller

Program name:

PC Utility Kit

Display publisher:

Red Dog Media

Display version:

3.2.0.0

Uninstall string:

C:\Program Files (x86)\PC Utility Kit\PC Utility Kit\uninstall.exe

The file uninstall.exe has been discovered within the following program.

PC Utility Kit by Red Dog Media

This is a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

www.pcutilitykit.com

About 62% of users remove it

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.