home

uninst.exe

Cole Williams

The application uninst.exe by Cole Williams has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Media Player Codec Pack 4.2.8 by Media Player Codec Pack. This file is typically installed with the program VLC Codec Pack 2.0.5 by VLC Codec Pack.
Publisher:
Cole Williams  (signed and verified)

MD5:
df33b84585cc6b56ca780a99d4fea2db

SHA-1:
bda9f85654ed955b6b07aa5863042d7006ea2a08

SHA-256:
ccfce125fc9b3c5cb95a6131808d787f9a11ed4e87816a387af62eeeefd2a7d9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 11:56:05 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ColeWilliams
15.1.31.6

File size:
254.3 KB (260,376 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\windows\syswow64\c2mp\uninst.exe

Digital Signature
Signed by:
Cole Williams

Authority:
COMODO CA Limited

Valid from:
10/12/2011 2:00:00 AM

Valid to:
10/12/2014 1:59:59 AM

Subject:
CN=Cole Williams, O=Cole Williams, STREET=156 Hainton Avenue, L=Grimsby, S=South Humberside, PostalCode=DN32 9LQ, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
39B7C287C179FBD0F13185D66A9E71AB

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:pgXdZt9P6D3XJV+GbebnCP8IIIMAIAw4c8E8Qr2o400wEQEoAcEgkMU4ko0wMIYF:pe34/+g87KZ4C

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Program Uninstaller
Program name:
Media Player Codec Pack 4.2.8

Display publisher:
Media Player Codec Pack

Display version:
4.2.8

Uninstall string:
C:\Windows\SysWOW64\C2MP\Uninst.exe


The file uninst.exe has been discovered within the following program.

VLC Codec Pack 2.0.5  by VLC Codec Pack
www.vlccodec.com
About 2% of users remove it
 
Powered by Should I Remove It?

Remove uninst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.