» istsearch_uninstall.exe
Overview
Analysis
File Details
Programs (1)

istsearch_uninstall.exe

Square Network Tech Co.,LTD.

The application istsearch_uninstall.exe by Square Network Tech Co.,LTD has been detected as adware by 9 anti-malware scanners. This file is typically installed with the program ISTsearch by Square Network Tech Co.,LTD..

File name:

Publisher:

Square Network Tech Co.,LTD. (signed and verified)

MD5:

ec48ad6e9c91e3e7639ff8c692a84feb

SHA-1:

2467982d96e7c5c56c224e54d3b45ef7d7fd4515

SHA-256:

a40deef9cdd7e634149b782515c934b5ebae00223438e0f9d0a091dc0a46a525

Scanner detections:

9 / 68

Status:

Adware

Analysis date:

4/26/2024 3:09:48 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

APPL/Downloader.Gen

7.11.180.228

avast!

Win32:Malware-gen

141023-1

AVG

Generic

2015.0.3312

Baidu Antivirus

PUA.Win32.SquareNet

4.0.3.141024

ESET NOD32

probably Win32/SquareNet.C potentially unwanted application

7.0.302.0

IKARUS anti.virus

PUA.SquareNet

t3scan.1.7.8.0

K7 AntiVirus

Unwanted-Program

13.184.13741

Reason Heuristics

PUP.SquareNetworkTechCoLTD.T

14.10.24.0

VIPRE Antivirus

Threat.4895341

33706

File size:

651.8 KB (667,456 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\istsearch\istsearch_uninstall.exe

Digital Signature

Signed by:

Square Network Tech Co.,LTD.

Authority:

VeriSign, Inc.

Valid from:

12/30/2013 7:00:00 PM

Valid to:

12/31/2014 6:59:59 PM

Subject:

CN="Square Network Tech Co.,LTD.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Square Network Tech Co.,LTD.", L=Zhongshan, S=Guangdong, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

08F1CEE1EA15CE4F4CA29FDEBE3DACA3

File PE Metadata

Compilation timestamp:

10/21/2014 5:11:52 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:Ucr2Z4Y8go3bC3c4QGh9Lw3Uz+e175jBJfA6oZEH6:UrsgKbC3nQGgEz+AFjXfAfZEH6

Entry address:

0x51EDF

Entry point:

E8, 6D, BF, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, CA, 1E, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 22, EB, FF, FF, 83, C4, 14, 83, C8, FF, EB, 4D, 8B, 45, 08, 3B, C3, 74, DC, 56, 89, 45, E8, 89, 45, E0, 8D, 45, 10, 50, 53, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, E4, FF, FF, FF, 7F, C7, 45, EC, 42, 00, 00, 00, E8, B9, A6, 00, 00, 83, C4, 10, FF, 4D, E4, 8B, F0, 78, 07, 8B, 45, E0, 88, 18, EB, 0C, 8D, 45, E0, 50, 53, E8, 01, 46, 00, 00, 59... 
[+]

Entropy:

6.6256

Code size:

424 KB (434,176 bytes)

The file istsearch_uninstall.exe has been discovered within the following program.

ISTsearch by Square Network Tech Co.,LTD.

Distributed through IST products (including IST Cleaner & IST Search) Inc. ISTsearch is bundled with IST Cleaner, a PC optimization program that is supposed to increase the speed of computer by removing invalid entries the computer's registry.

38% remove it

Remove istsearch_uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.