baconuninst.exe

cafconuninstall

enliple Ltd.

The application baconuninst.exe by enliple has been detected as a potentially unwanted program by 4 anti-malware scanners.
Publisher:
enliple Ltd.  (signed and verified)

Product:
cafconuninstall

Version:
1.00

MD5:
3b3bf6afd723dd6d53299760824ec19b

SHA-1:
10f233c417bfb9c76015ad260d136bc929e70c5f

SHA-256:
508fb238e6d5d80a8ff28545e12f6e4225298eeaef9bbda53194b019127dcdd6

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
5/10/2024 5:47:12 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Adkor
7.1.1

Dr.Web
Trojan.Adkor.92
9.0.1.0333

IKARUS anti.virus
PUA.Kraddare
t3scan.1.9.5.0

Reason Heuristics
PUP.enliple (M)
15.11.29.3

File size:
395.9 KB (405,352 bytes)

Product version:
1.00

Trademarks:
cafconuninstall

Original file name:
baconuninst.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\keywordbacon\baconuninst.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
6/26/2013 9:00:00 AM

Valid to:
6/27/2015 8:59:59 AM

Subject:
CN=enliple Ltd., OU=Internet Dept, O=enliple Ltd., L=Guro-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
178A151BFE91D2CFD345640D3EE64736

File PE Metadata
Compilation timestamp:
3/31/2014 5:22:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:ZX6H5raD8Dr0VCOO/J9ZVw4gaX6H5raD8Dr0VCOO/K:ZX6HJaD0r0QOOBL24gaX6HJaD0r0QOOS

Entry address:
0x1968

Entry point:
68, 94, BF, 42, 00, E8, EE, FF, FF, FF, 00, 00, 58, 00, 00, 00, 30, 00, 00, 00, 50, 00, 00, 00, 40, 00, 00, 00, 42, FC, 2F, AF, 88, 37, 10, 41, 9D, BF, E8, 43, 46, 2D, 14, ED, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 43, 30, 30, 30, 2D, 62, 61, 63, 6F, 6E, 75, 6E, 69, 6E, 73, 74, 00, 7D, 23, 32, 2E, 63, 61, 66, 63, 6F, 6E, 75, 6E, 69, 6E, 73, 74, 61, 6C, 6C, 00, 00, 73, 74, 65, 6D, 33, 32, 5C, 00, 00, 00, 00, A0, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 01, 00, 00, 00, D7, D1, FB, BC, BE, BC, 5B, 43...
 
[+]

Entropy:
6.3698

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
212 KB (217,088 bytes)

Remove baconuninst.exe - Powered by Reason Core Security