» uninstall_smartwinkey.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall_smartwinkey.exe

dreamhands

The application uninstall_smartwinkey.exe by dreamhands has been detected as adware by 7 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program windows smart key by windows smart key. This file is typically installed with the program windows smart key which is a potentially unwanted software program.

File name:

Publisher:

dreamhands (signed and verified)

MD5:

f58bfd146f7701791fd0f2b38b295d4d

SHA-1:

ebbbf5b81034ae7be197794137b20a5bc3f2979b

SHA-256:

47e1c16846fc42475ab35abb05a452792fc08537ecc7f79b85dfd10dfd3680bd

Scanner detections:

7 / 68

Status:

Adware

Analysis date:

4/26/2024 11:13:10 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

AVG

Win32/DH{gQwggRITJCIlATYK}

2015.0.3284

Comodo Security

TrojWare.Win32.Trojan.Agent.Gen

19887

McAfee

Artemis!F58BFD146F77

5600.6940

Reason Heuristics

PUP.dreamhands

15.3.1.12

Trend Micro House Call

ADW_KRADDARE

7.2.324

Trend Micro

ADW_KRADDARE

10.465.20

ViRobot

Trojan.Win32.Agent.1073000

2011.4.7.4223

File size:

1 MB (1,073,000 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\smartwinkey\uninstall_smartwinkey.exe

Digital Signature

Signed by:

dreamhands

Authority:

Thawte, Inc.

Valid from:

1/17/2012 9:00:00 AM

Valid to:

1/17/2013 8:59:59 AM

Subject:

CN=dreamhands, O=dreamhands, L="Haeundae-gu ", S=Busan, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

3DAC2BFA171181BF28AC28630D02C5F0

File PE Metadata

Compilation timestamp:

6/20/1992 7:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:uYGrg0yF8Ycd16RWJ3ESOYehlxUdxj2zwV:uYzcd13gH+owV

Entry address:

0xE32F4

Entry point:

55, 8B, EC, 83, C4, E8, 53, 33, C0, 89, 45, EC, 89, 45, E8, B8, CC, 2D, 4E, 00, E8, F7, 37, F2, FF, 33, C0, 55, 68, B3, 33, 4E, 00, 64, FF, 30, 64, 89, 20, 8D, 55, E8, A1, C0, B8, 4E, 00, 8B, 00, E8, DE, 8F, FC, FF, 8B, 45, E8, 8D, 55, EC, E8, 7B, 85, F2, FF, 8B, 45, EC, E8, 27, 1A, F2, FF, 50, 6A, FF, 6A, 00, E8, 55, 3A, F2, FF, 8B, D8, E8, D6, 3B, F2, FF, 3D, B7, 00, 00, 00, 75, 08, 53, E8, 89, 3D, F2, FF, EB, 3B, A1, C0, B8, 4E, 00, 8B, 00, E8, F7, 88, FC, FF, 8B, 0D, C4, B3, 4E, 00, A1, C0, B8, 4E, 00... 
[+]

Entropy:

6.6286

Developed / compiled with:

Microsoft Visual C++

Code size:

905 KB (926,720 bytes)

Program Uninstaller

Program name:

windows smart key

Display publisher:

windows smart key

Display version:

1.0

Uninstall string:

C:\Program Files\smartwinkey\uninstall_smartwinkey.exe delete

The file uninstall_smartwinkey.exe has been discovered within the following program.

windows smart key

About 65% of users remove it

Remove uninstall_smartwinkey.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.