home

uninstallationtool.exe

This is a setup program which is used to install the application.
MD5:
7bdf9028218bcd68158711f81b933da5

SHA-1:
61230ece40e7d9b57323716316c9babdb1cc566f

SHA-256:
c72936a6e488ff293795efc8ffa501eb0888912d42eb8dafe0376f144353389f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:43:44 AM UTC  (today)

File size:
1.3 MB (1,344,640 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\uninstallationtool.exe

File PE Metadata
Compilation timestamp:
12/2/2015 7:24:44 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:HUMV4HDdU+YdDgmRIiLB9fMvGIR0I1ARDVDlETXlRZqFhGfTFcM2FJ5Mfcn7:H3V4jd/mRbMvMI1A5V5E5RZqATD4J5x7

Entry address:
0x11489

Entry point:
E8, 96, 42, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, 83, 7D, 08, 00, 75, 04, 33, C0, 5D, C3, 53, 57, FF, 75, 08, E8, A6, 1C, 00, 00, 8D, 78, 01, 57, E8, 5F, 01, 00, 00, 8B, D8, 59, 59, 85, DB, 74, 15, FF, 75, 08, 57, 53, E8, 36, 47, 00, 00, 83, C4, 0C, 85, C0, 75, 0A, 8B, C3, EB, 02, 33, C0, 5F, 5B, 5D, C3, 33, C0, 50, 50, 50, 50, 50, E8, 6D, 38, 00, 00, CC, 55, 8B, EC, 8B, 55, 14, 8B, 4D, 08, 56, 85, D2, 75, 0D, 85, C9, 75, 0D, 39, 4D, 0C, 75, 21, 33, C0, EB, 2E, 85, C9, 74, 19, 8B, 45, 0C, 85, C0, 74, 12...
 
[+]

Code size:
125 KB (128,000 bytes)

The file uninstallationtool.exe has been seen being distributed by the following URL.

ftp://ftp.f-secure.com/support/tools/.../UninstallationTool.exe

Scan uninstallationtool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.