home

uninstall.exe

Softacular

The application uninstall.exe by Softacular has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This file is typically installed with the program Rockettab by Rich River Media, LLC which is a potentially unwanted software program.
Publisher:
Softacular  (signed and verified)

Version:
1.0.5400.12982

MD5:
1ed8942bcff89575a09fedbfe2a47511

SHA-1:
ad6bbf7fda45d67228b88b6cbc1f2a8a575c1914

SHA-256:
47dae5f0a6f9a140caa15b2e2c4a4bc26bf06aa8c3688cb2f894ba2410cd239a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/28/2024 1:40:56 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Softacular.Installer (M)
16.3.3.23

File size:
3.7 MB (3,886,304 bytes)

Product version:
1.0.5400.12982

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\search extensions\uninstall.exe

Digital Signature
Signed by:
Softacular

Authority:
COMODO CA Limited

Valid from:
3/24/2014 5:30:00 AM

Valid to:
3/25/2015 5:29:59 AM

Subject:
CN=Softacular, O=Softacular, STREET="4600 Madison Ave, 10th FL", L=Kansas City, S=Missouri, PostalCode=64112, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
753A79B32D5A96BF1872FDE1AC60DEEA

File PE Metadata
Compilation timestamp:
10/14/2014 1:43:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:fjGaE2nHZVqzP41UaQzITJPwLJV/K0u+1Qo4OrGvr6E8OnecLM5pKP4Y9u:fjTED8NoLPn+orc6E3ecY5QAYw

Entry address:
0x3AAAA9

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.3691

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
3.7 MB (3,836,928 bytes)

The file uninstall.exe has been discovered within the following program.

Rockettab  by Rich River Media, LLC
RocketTab is an adware program that injects advertising in the user's web browser by creating a local proxy server and routing all Internet traffic through that proxy. By re-routing traffic the service will be able to include various ads in the HTML of the displaying web page.
rockettab.com
88% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.