home

uninstaller.exe

One System Care Limited

The application uninstaller.exe by One System Care Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program One System Care by OneSystemCare. This file is typically installed with the program One System Care by OneSystemCare.
Publisher:
One System Care Limited  (signed and verified)

Version:
2.00.00.1

MD5:
880f47fc8c8b7c66fafeeef320d69924

SHA-1:
cb0242b3a33627aabaaf8a784572bc5a666be5f6

SHA-256:
a5061e9dd9db7d6e91f63d682f812fe85548b54450485200b47826de22fc3522

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 6:32:58 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.OneSystemCare.Installer.Meta (M)
16.6.29.13

File size:
500.5 KB (512,472 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\onesystemcare\uninstaller.exe

Digital Signature
Signed by:
One System Care Limited

Authority:
Symantec Corporation

Valid from:
3/23/2015 7:00:00 PM

Valid to:
3/23/2016 6:59:59 PM

Subject:
CN=One System Care Limited, OU=IT edepartment, O=One System Care Limited, L=London, S=London W1S 1DA, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2921701CD0BE5D77AE345A65F1DBA846

File PE Metadata
Compilation timestamp:
2/24/2012 1:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:XEu4U0X8xZgmdJhSBhiw8LYLU9Vv4DQljw:XwUpRpSBsxoU9VvP5w

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.8486

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

Program Uninstaller
Program name:
One System Care

Display publisher:
OneSystemCare

Display version:
2.00.00.1

Uninstall string:
C:\Program Files (x86)\OneSystemCare\Uninstaller.exe


The file uninstaller.exe has been discovered within the following program.

One System Care  by OneSystemCare
www.onesystemcare.com
44% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.