home

desinstallation.exe

PC SOFT

The executable desinstallation.exe has been detected as malware by 1 anti-virus scanner. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WinDev Mobile 15.
Publisher:
PC SOFT  (signed and verified)

Description:
Désinstallation

Version:
15.00Aa

MD5:
b8e9ad1c30739675c7f63f5b58de6a04

SHA-1:
3cf0987abc46377feca5d1fdd9663144cd3ed251

SHA-256:
d77a9052ddee9d5f174c42c3604bd618ad94dcc00e5a6c8b1ce4ebe3de94d057

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/23/2024 4:41:57 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.10.10.21

File size:
2.1 MB (2,184,600 bytes)

Copyright:
Copyright © PC SOFT 2009

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\pc soft\windev mobile 15\desinstallation.exe

Digital Signature
Signed by:
PC SOFT

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/20/2009 3:19:36 PM

Valid to:
7/5/2010 5:51:05 PM

Subject:
CN=PC SOFT, OU=Provided by TBS INTERNET http://www.tbs-certificats.com/, OU=Service Qualité, O=PC SOFT, L=Montpellier, S=Herault, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
410DF37D906544F8E0EF15188806FCB4

File PE Metadata
Compilation timestamp:
12/4/2009 12:19:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:/YV+7H6re3dZ4GPPW0GY1yux0zCn1Q5H74kt:s+7qe34KB1yRzCCHT

Entry address:
0x116CC

Entry point:
55, 8B, EC, 6A, FF, 68, D8, 32, 41, 00, 68, 30, 18, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 84, 31, 41, 00, 59, 83, 0D, 94, A3, 41, 00, FF, 83, 0D, 98, A3, 41, 00, FF, FF, 15, 88, 31, 41, 00, 8B, 0D, AC, 9F, 41, 00, 89, 08, FF, 15, 8C, 31, 41, 00, 8B, 0D, A8, 9F, 41, 00, 89, 08, A1, 90, 31, 41, 00, 8B, 00, A3, 90, A3, 41, 00, E8, 9A, 75, FF, FF, 39, 1D, 50, 90, 41, 00, 75, 0C, 68, 06, 47, 40, 00, FF, 15, 94, 31...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
72 KB (73,728 bytes)

Program Uninstaller
Program name:
WinDev Mobile 15

Uninstall string:
"C:\Program Files\PC SOFT\WinDev Mobile 15\Desinstallation.exe" /REG="WinDev Mobile 15" /REP="C:\Program Files\PC SOFT\WinDev Mobile 15" /FIC="C:\Program Files\PC SOFT\WinDev Mobile 15\uninst.inf"


Remove desinstallation.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.