home

uninst_perfectsystem.exe

uninst_perfectsystem

UCF

The application uninst_perfectsystem.exe by UCF has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program perfectsystem by UCF.
Publisher:
UCF  (signed and verified)

Product:
uninst_perfectsystem

Description:
uninstaller

Version:
1, 0, 0, 1

MD5:
abb314225945271ef87a365693cc53f2

SHA-1:
f5cdfd040fe8f45c20a8801c1250ba181de1b772

SHA-256:
7d9f62f21087dae943a51d8ae240e8acc87a9340432219c0405594eadfa6f2dc

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/20/2024 12:48:12 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.UCF.Installer (M)
16.2.6.3

File size:
158.5 KB (162,328 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2014 UCF All rights reserved.

Original file name:
uninst_perfectsystem.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\perfectsystem\uninst_perfectsystem.exe

Digital Signature
Signed by:
UCF

Authority:
Thawte, Inc.

Valid from:
7/3/2013 9:00:00 AM

Valid to:
8/3/2014 8:59:59 AM

Subject:
CN=UCF, O=UCF, L=Haewoondae-gu, S=BUSAN, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5C486B28674FE118251400311CA913D9

File PE Metadata
Compilation timestamp:
2/10/2014 10:20:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:siEE+lPhkVhtV64bbI7U6jXUXKIdy/yynhxoaMQnvgpL5ZIbWrWxi0pZIzW:siD+XkVVM7U6jXV0VIgJIgMiYZI6

Entry address:
0xBF7B0

Entry point:
60, BE, 00, B0, 49, 00, 8D, BE, 00, 60, F6, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.8825

Packer / compiler:
UPX 2.90LZMA

Code size:
148 KB (151,552 bytes)

Program Uninstaller
Program name:
perfectsystem

Display publisher:
UCF

Display version:
1.2

Uninstall string:
C:\Program Files (x86)\perfectsystem\uninst_perfectsystem.exe


Remove uninst_perfectsystem.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.