home

cuninst.exe

Crawler Toolbar

Crawler, LLC

The application cuninst.exe by Crawler has been detected as a potentially unwanted program by 6 anti-malware scanners. It is also typically executed from the user's temporary directory.
Publisher:
Crawler.com  (signed by Crawler, LLC)

Product:
Crawler Toolbar

Version:
5.1.0.457

MD5:
1ae1dc7d0dc011fb58792a91eb1bd059

SHA-1:
50478ee918fa1d35a4f6c3aaf6011fb54305f98d

SHA-256:
9974bfa636e6667bdef05bf0ff256bebe7ec599f02b1e96ee4f653d594d753a9

Scanner detections:
6 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 10:46:25 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3001

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Program.Unwanted.422
9.0.1.0242

herdProtect (fuzzy)
variant of ctoolbar.exe (Adware)
2015.10.27.1

Reason Heuristics
PUP.Crawler.Toolbar (M)
15.8.30.21

Trend Micro House Call
Suspicious_GEN.F47V0507
7.2.242

File size:
2.4 MB (2,541,736 bytes)

Product version:
5.1.0.457

Copyright:
© Crawler.com

Original file name:
CToolbar.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\cuninst.exe

Digital Signature
Signed by:
Crawler, LLC

Authority:
VeriSign, Inc.

Valid from:
12/9/2010 6:00:00 PM

Valid to:
12/11/2013 5:59:59 PM

Subject:
CN="Crawler, LLC", OU=IT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Crawler, LLC", L=Boca Raton, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1535EDA3C8F2FED30D4497572760F240

File PE Metadata
Compilation timestamp:
6/19/2012 8:23:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:pmdQsNADn6FGF3rDSsIgGjL7kmVTT+hshIaEFON:MdbsnsGEjL7kWeihyF0

Entry address:
0x163E74

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 28, 24, 56, 00, E8, 6D, 40, EA, FF, 33, C0, 55, 68, AC, 3E, 56, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 8C, 42, EA, FF, 50, E8, 6E, 44, EA, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 0A, E9, FF, 0E, EA, FF, E8, CE, 13, EA, FF, E8, 1D, F0, FD, FF, 5F, 5E, 5B, E8, 25, 18, EA, FF, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.9853

Developed / compiled with:
Microsoft Visual C++

Code size:
1.4 MB (1,453,568 bytes)

Remove cuninst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.