home

UninstallServices.exe

AlwaysUp

Core Technologies Consulting, LLC

This is a setup and installation application.
Publisher:
Core Technologies Consulting, LLC  (signed and verified)

Product:
AlwaysUp

Description:
UninstallServices

Version:
7, 5, 0, 39

MD5:
1b88abb76f98c07648ba7717b7c94cf4

SHA-1:
0781ced015b79063db59888a21d1e0a6bc188a72

SHA-256:
af315e7b935d38ac5a8c0064c32949e90dafcb9171fc50e6bf5053aa3d699965

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 8:02:26 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
505.8 KB (517,936 bytes)

Product version:
7, 5, 0, 39

Copyright:
© 2001-2010, Core Technologies Consulting, LLC

Original file name:
UninstallServices.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\alwaysup\uninstallservices.exe

Digital Signature
Signed by:
Core Technologies Consulting, LLC

Authority:
The USERTRUST Network

Valid from:
3/8/2009 8:00:00 PM

Valid to:
3/8/2012 6:59:59 PM

Subject:
CN="Core Technologies Consulting, LLC", O="Core Technologies Consulting, LLC", STREET=7028-B Thornhill Drive, L=Oakland, S=CA, PostalCode=94611, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
2403C7FF57D6E84A387FA919BF1F0B05

File PE Metadata
Compilation timestamp:
8/13/2010 12:21:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:YC9PoEmVszNzJckziLoX8dDCAM8uSUqbNBeRUXimVclhi:YCFRNz92LoX0nJZLRB1im+0

Entry address:
0x6EB60

Entry point:
B8, 04, DA, 58, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 7C, F9, FF, 65, FB, 6E, F3, E5, 4D, D2, AE, B2, B1, 79, E5, 40, 9F, C4, CE, 4B, D9, 9B, 33, F9, 10, 42, 0E, 77, 34, 96, BE, 6A, 40, 21, 36, CA, F0, 4D, 90, 7E, B1, 01, 23, 4A, 5E, 78, 83, 06, 53, FA, A6, CF, 12, EE, 10, 9B, 51, 03, 2E, 48, 79, D6, C6, CB, 49, 9B, 3E, 84, B9, D7, 3F, 2A, 38, 45, 84, 42, 8C, 57, A9, 44, BC, 51, 69, 99, 56, 24, 2E, 93, 05, AB, E4, 48, B3...
 
[+]

Entropy:
7.9957

Packer / compiler:
PECompact v2

Code size:
1.2 MB (1,216,000 bytes)

Scan UninstallServices.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.