» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)

uninstall.exe

SimpleFiles Installer

Technology Island, Inc.

This is the Via Advertising bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application uninstall.exe by Technology Island has been detected as adware by 21 anti-malware scanners. The program is a setup application that uses the YourFile Downloader installer. This is the uninstaller utility registered in the Windows Control Panel for the program SimpleFiles by http://simple-files.com. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.

File name:

uninstall.exe

Publisher:

Technology Island, Inc. (signed and verified)

Product:

SimpleFiles Installer

Version:

1, 0, 25, 1

MD5:

feb90b47ef9390af31f40186b049f29e

SHA-1:

67681a434c61209110e59dc46dccf095a259e324

Scanner detections:

21 / 68

Status:

Adware

Explanation:

Injects advertising in the web browser in various formats.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/19/2024 5:51:59 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Kazy.462844

374

Avira AntiVirus

Adware/BrowseFox.aox

7.11.200.132

avast!

Win32:Rootkit-gen [Rtk]

2014.9-160127

AVG

Generic

2017.0.2852

Bitdefender

Gen:Variant.Adware.Kazy.462844

1.0.20.135

Dr.Web

Threat.Undefined

9.0.1.027

Emsisoft Anti-Malware

Gen:Variant.Adware.Kazy.462844

8.16.01.27.02

ESET NOD32

Win32/ExpressDownloader.J potentially unwanted application

10.7.0.302.0

F-Secure

Gen:Variant.Adware.Kazy.462844

11.2016-27-01_4

G Data

Gen:Variant.Adware.Kazy.462844

16.1.24

IKARUS anti.virus

PUA.ICLoader

t3scan.1.7.5.0

K7 AntiVirus

Unwanted-Program

13.183.13432

Microsoft Security Essentials

Threat.Undefined

1.193.2090.0

MicroWorld eScan

Gen:Variant.Adware.Kazy.462844

17.0.0.81

NANO AntiVirus

Riskware.Win32.Babylon.dffshm

0.28.2.62151

Norman

Gen:Variant.Adware.Kazy.462844

11.20160127

Qihoo 360 Security

Malware.QVM20.Gen

1.0.0.1015

Reason Heuristics

PUP.Via Advertising.TechnologyIsland.Bundler (M)

16.1.27.2

Sophos

PUA 'Go For Files'

5.11

VIPRE Antivirus

Threat.4925438

32210

Zillya! Antivirus

Trojan.TDSS.Win32.42343

2.0.0.2033

File size:

3.1 MB (3,211,344 bytes)

Product version:

1.0.0.1

Original file name:

SimpleFilesInstaller.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

YourFile Downloader

Language:

English (United States)

Common path:

C:\Program Files\simplefiles\uninstall.exe

Digital Signature

Signed by:

Technology Island, Inc.

Authority:

COMODO CA Limited

Valid from:

8/3/2012 8:00:00 AM

Valid to:

8/4/2014 7:59:59 AM

Subject:

CN="Technology Island, Inc.", O="Technology Island, Inc.", STREET="1740 H Dell Range Blvd #281", L=Cheyenne, S=Wyoming, PostalCode=82009, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00C4B79CE2BFD68D5C070C51E7F2C237C5

File PE Metadata

Compilation timestamp:

7/4/2014 5:12:44 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

98304:bFnJxesDyZH8IbYV8iyn6Pt1QfR1tOCmpJJdr0ahXEiLCTu/7p8hrGEKeS:bPTAH1diI60OCmJSWUiLyw7Or1bS

Entry address:

0x35E1A0

Entry point:

60, BE, 00, D0, 46, 00, 8D, BE, 00, 40, F9, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Entropy:

7.7266

Packer / compiler:

UPX 2.90LZMA

Code size:

2.9 MB (3,088,384 bytes)

Program Uninstaller

Program name:

SimpleFiles

Display publisher:

http://simple-files.com

Display version:

15.14.27

Uninstall string:

"C:\Program Files\SimpleFiles\Uninstall.exe"

Remove uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.