home

uninstall.exe

Tanja Matkovic

The application uninstall.exe by Tanja Matkovic has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program FTdownloader V9.0 by installdaddy.
Publisher:
Tanja Matkovic  (signed and verified)

MD5:
5966fd0a234aded4232fcb83f362653a

SHA-1:
3359e17555b7cdd1191d481ab89c2a3fb241097f

SHA-256:
134e53c4e3faec676001b99a15e54e3abdbeeace42ab39aff9db26cff4273a70

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 7:34:10 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.TanjaMatkovic.Installer (M)
16.2.14.23

File size:
102.9 KB (105,384 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ftdownloader v9.0\uninstall.exe

Digital Signature
Signed by:
Tanja Matkovic

Authority:
Thawte, Inc.

Valid from:
5/1/2013 2:00:00 AM

Valid to:
5/2/2014 1:59:59 AM

Subject:
CN=Tanja Matkovic, OU=Individual Developer, O=No Organization Affiliation, L=Subotica, S=Subotica, C=RS

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A3131F81D52E40A00F4396C56D649C5

File PE Metadata
Compilation timestamp:
7/6/2014 12:03:23 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:LFaDK5iWq8MuuB0KtU+ETlbN7AauwucFC1sWjcd/U3o9:MDKbAqK988UC6/U3o9

Entry address:
0x5A94

Entry point:
E8, E9, 63, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D8, 7F, 41, 00, E8, 26, 0A, 00, 00, E8, 85, 24, 00, 00, 0F, B7, F0, 6A, 02, E8, 7C, 63, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 5D, 5D, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
69 KB (70,656 bytes)

Program Uninstaller
Program name:
FTdownloader V9.0

Display publisher:
installdaddy

Display version:
1.34.7.1

Uninstall string:
C:\Program Files (x86)\FTdownloader V9.0\Uninstall.exe /fcp=1


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.