home

uninstall.exe

Softacular

The application uninstall.exe by Softacular has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program BrowserSafeguard with RocketTab by BrowserSafeguard with RocketTab.
Publisher:
Softacular  (signed and verified)

Version:
1.0.5401.25483

MD5:
9ac2447e3be74df882161e3959a7695d

SHA-1:
66a54d0af30ab536a65dc6495f3d7d8fdee4f6f3

SHA-256:
5cb0a3f2bef7c5dd130efa4ae6ef5c8fd23c1c5b408211c23a03b5744a1b098d

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
5/19/2024 8:00:37 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Agent
7.1.1

Avira AntiVirus
Adware/MSIL.RocketTab.lk
7.11.199.126

avast!
Win32:IBryte-GU [PUP]
2014.9-150104

AVG
Softacular
2016.0.3239

Dr.Web
Adware.iBryte.505
9.0.1.05190

ESET NOD32
MSIL/Adware.iBryte.G application
7.0.302.0

F-Prot
W32/S-3ab11bd4
v6.4.7.1.166

G Data
Win32.Adware.Rockettab
15.1.24

Kaspersky
not-a-virus:AdWare.MSIL.RocketTab
15.0.0.543

McAfee
Adware-RocketTab
5600.6895

VIPRE Antivirus
Threat.4798837
36340

Zillya! Antivirus
Adware.RocketTab.Win32.111
2.0.0.2026

File size:
3.7 MB (3,886,816 bytes)

Product version:
1.0.5401.25483

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\search extensions\uninstall.exe

Digital Signature
Signed by:
Softacular

Authority:
COMODO CA Limited

Valid from:
3/23/2014 8:00:00 PM

Valid to:
3/24/2015 7:59:59 PM

Subject:
CN=Softacular, O=Softacular, STREET="4600 Madison Ave, 10th FL", L=Kansas City, S=Missouri, PostalCode=64112, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
753A79B32D5A96BF1872FDE1AC60DEEA

File PE Metadata
Compilation timestamp:
10/15/2014 11:09:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:hZ31UaazITJPwLJVBAKDbGkcktMhiDmhXxoQk7b3fkN9wNNxvwg4Y9y:48NoLPEk2Icef3fsaH+YY

Entry address:
0x3AAC50

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3695

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.7 MB (3,837,440 bytes)

Program Uninstaller
Program name:
BrowserSafeguard with RocketTab

Display publisher:
BrowserSafeguard with RocketTab

Uninstall string:
"C:\Program Files (x86)\Search Extensions\uninstall.exe" /u=true /UserID=62b598b8-87c4-48ab-842a-bc88afe6f9d3 /SourceID=floatads1|floatads_6java2 /ImplementationID=browsersafeguard-rockettab-ptn /UC=2


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.