» Uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Uninstall.exe

Crime Watch

Mathematical Applications

This is the uninstall module for the Injekt branded web browser extension program which injects advertising in the web browser as well as modifies the browser settings. The uninstaller is registered within Control Panel > Add/Remove Programs. The application Uninstall.exe, “CrimeWatch Uninstall” by Mathematical Applications has been detected as adware by 9 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program CrimeWatch by Mathematical Applications. This file is typically installed with the program CrimeWatch by Mathematical Applications which is a potentially unwanted software program.

File name:

Uninstall.exe

Publisher:

Mathematical Applications (signed and verified)

Product:

Crime Watch

Description:

CrimeWatch Uninstall

Version:

1.0.0.0

MD5:

1dd31e4fb810da8b886d5c40f34d55fa

SHA-1:

c4a84716f56cc6925986bf4283bab2d534b42cef

SHA-256:

5ad581ab952aaba5c12cadc252baa32864d749153878778eb7ec4134164ac097

Scanner detections:

9 / 68

Status:

Adware

Explanation:

Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:

4/26/2024 2:16:06 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

ADWARE/Adware.Gen7

7.11.202.118

avast!

MSIL:Adware-G [PUP]

150101-1

AVG

Generic

2016.0.3212

Baidu Antivirus

Adware.MSIL.PullUpdate

4.0.3.1521

Comodo Security

ApplicUnwnt

20438

ESET NOD32

MSIL/Adware.PullUpdate.J.gen application

7.0.302.0

F-Secure

Gen:Variant.Adware.Jatif.92

11.2015-01-02_1

Malwarebytes

PUP.Optional.CrimeWatch.A

v2015.02.01.05

Reason Heuristics

PUP.Injekt

15.2.1.5

File size:

651.3 KB (666,896 bytes)

Product version:

1.0.0.0

Original file name:

Uninstall.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\ProgramData\crimewatch\uninstall.exe

Digital Signature

Signed by:

Mathematical Applications

Authority:

VeriSign, Inc.

Valid from:

10/27/2014 1:00:00 AM

Valid to:

10/28/2015 12:59:59 AM

Subject:

CN=Mathematical Applications, O=Mathematical Applications, L=St. James, S=St. James, C=BB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

79F6406432970C77D2FA7772E5EB6BDC

File PE Metadata

Compilation timestamp:

1/29/2015 6:18:31 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

12288:+Hji071C63FvtthBqjrN2UrK9K8krxJQHv7P7pZZ+NaWRG9eaLnSqmJ:+e0063Fvt7BqfZKU8krEzP7pZaaGGkas

Entry address:

0x840FE

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

520.5 KB (532,992 bytes)

Program Uninstaller

Program name:

CrimeWatch

Display publisher:

Mathematical Applications

Display version:

3.0.37

Uninstall string:

"C:\ProgramData\CrimeWatch\uninstall.exe"

The file Uninstall.exe has been discovered within the following program.

CrimeWatch by Mathematical Applications

CrimeWatch (by Injekts Media, dba Mathematical Applications) is an ad-supported program that may deliver third-party advertisements in the form of coupons, price-comparisons, display media, affiliate links, banners, popups/popunders and other links through means including but not limited to the content of any web page accessed, plug-ins, add-ons, or the browser itself.

88% remove it

Remove Uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.