home

uninstaller.exe

One System Care Limited

The application uninstaller.exe by One System Care Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program One System Care by OneSystemCare. This file is typically installed with the program One System Care by OneSystemCare.
Publisher:
One System Care Limited  (signed and verified)

Version:
2.00.00.1

MD5:
5dd1f34460435a7e4c7e7f0aa3feb5b6

SHA-1:
b5f59d118ca85c76952af785c60d5e1962ec9cd0

SHA-256:
ccea7e589ad05a15fec83d330a86e80854eb9ad331621e3d4df9cb43ec120a66

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/18/2024 10:48:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.OneSystemCare.Installer.Meta (M)
16.6.29.13

File size:
500.5 KB (512,528 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\onesystemcare\uninstaller.exe

Digital Signature
Signed by:
One System Care Limited

Authority:
Symantec Corporation

Valid from:
3/23/2015 8:00:00 PM

Valid to:
3/23/2016 7:59:59 PM

Subject:
CN=One System Care Limited, OU=IT edepartment, O=One System Care Limited, L=London, S=London W1S 1DA, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2921701CD0BE5D77AE345A65F1DBA846

File PE Metadata
Compilation timestamp:
2/24/2012 2:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:4EUXT4zauV/k4RlZHFm1ulePxZf4EX12ihmEhSM0gOhiw8yib5um/ejiqLUzwaUJ:4Eu440X8xZgmdJhSBhiw8LYLUVUDz3J

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.8485

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

Program Uninstaller
Program name:
One System Care

Display publisher:
OneSystemCare

Display version:
2.00.00.1

Uninstall string:
C:\Program Files (x86)\OneSystemCare\Uninstaller.exe


The file uninstaller.exe has been discovered within the following program.

One System Care  by OneSystemCare
www.onesystemcare.com
44% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.