» your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe
Overview
Analysis
File Details
Programs (1)
Downloads (33)

your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

Your Uninstaller! 7

URSoft, Inc.

The application your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe, “Your Uninstaller! 7 Setup ” by URSoft has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. This file is typically installed with the program Toolwiz Time Freeze 2015 by ToolWiz. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.

File name:

Publisher:

URSoft, Inc. (signed by URSoft, Inc.)

Product:

Your Uninstaller! 7

Description:

Your Uninstaller! 7 Setup

Version:

7.4.2012.5

MD5:

ea6cc2aae253c30501084682e0aa4026

SHA-1:

d0fc7a98e24dbd54d88335dc156497c5534c0151

SHA-256:

73743b999cdc2f1ab5f065d03c4979baa63c830c221d8130af384bdecdeec12f

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 1:48:48 PM UTC (today)

Scan engine

Detection

Engine version

Emsisoft Anti-Malware

Android.Trojan.GingerMaster.R

8.14.02.12.08

Reason Heuristics

PUP.Optional.URSoft.Installer

15.6.19.11

File size:

805.5 KB (824,824 bytes)

Product version:

7.4.2012.5

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

Digital Signature

Signed by:

URSoft, Inc.

Authority:

COMODO CA Limited

Valid from:

3/6/2012 12:00:00 AM

Valid to:

3/6/2015 11:59:59 PM

Subject:

CN="URSoft, Inc.", O="URSoft, Inc.", STREET=7241 W. Addison, L=Chicago, S=IL, PostalCode=60634, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

2D52C7CF5E69A633AC3AED0E78F988DC

File PE Metadata

Compilation timestamp:

12/25/2011 9:18:04 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:F3Mjh1B2N888888888888W88888888888DxKWY2fHMyxIZcZIqfX5TIfofnQBk1B:JMjhG3BxIZcZbfXWgQBkZSO3+KyHt4

Entry address:

0x16478

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, B0, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, B0, D6, 41, 00, B2, 01... 
[+]

Entropy:

7.5736

Code size:

84 KB (86,016 bytes)

The file your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe has been discovered within the following program.

Toolwiz Time Freeze 2015 by ToolWiz

www.Toolwiz.com

About 5% of users remove it

The file your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe has been seen being distributed by the following 33 URLs.

http://lb.cdn.m6web.fr/d/c/a/2d67f5651eb12047c974f3f10121b288/5669607b/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/ebeecff406953fbeaeb9cb0009514c15/56a9108e/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/d6257f46904ce77de429bdae48c61eb5/58064250/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/f90b50e821c5ac7eddd9bf29361ae712/57fb5c27/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/bf1b6827ded5ab0eb33d65f67383be5f/5772a518/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/d1c251a462d7bacf753281aa3bee799e/58167153/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/f9c1cc2b1664435c7549cf3a50e81bc2/57bd9539/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/10da6fb6af72535d1c4377bcaad07619/581bacf1/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/6a03926d04c3dd00924973f43cebcb8e/582fb405/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/029e11c536bcbbe1983cc03ad8707317/55cf6f84/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/1bb7c04140af70bedf75291d28037906/57338b9b/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/e3f269814bda3db517629bdc1f6a48a7/56e70a00/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/b43e939a76310fa30f9806050ee72f69/5755e137/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://soft.archive2.clubic.com/files/414895e8fe4cbe83c195d16e0e256fc6/52ac8c68/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/51a8a3fd63298c4b2dc3455f910f1202/573cd114/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/54028bbe876fdcda52f1c4729d262d42/56fcc25f/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/db5f669499330b8d0940309d5582adb1/56f665ca/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/fa0416a89e5b7593a59226a1eebb7f1c/56e3258d/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://server3.xnavigation.net/dl/Tvbxw/597/13768/defa/.../your-uninstaller

http://w7.mien-phi.com/Data/Soft/2013/07/.../yusetup.exe

http://lb.cdn.m6web.fr/d/c/a/87d41b06c262431ed7a07f20b97bb97b/567ec1ff/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://d110.cdn.m6web.fr/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/e8e4a71c93896cb958f4ad0d945a62e1/569de3d2/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://w6.mien-phi.com/Data/Soft/2013/07/.../yusetup.exe

http://w2.mien-phi.com/Data/Soft/2013/07/.../yusetup.exe

http://lb.cdn.m6web.fr/d/c/a/a779969f37aba26a431793a003a58045/55130db6/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/1e8221aa9ec663558cd387885024a8aa/547aa702/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://d210.cdn.m6web.fr/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://lb.cdn.m6web.fr/d/c/a/6b60fbe5a15870e2f9f4786d99bd0374/53b54f6d/soft/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

http://soft.archive1.clubic.com/files/9ba8be5d2a197c155e558b1067f804fd/52493855/.../your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe

Latest 30 of 33 download URLs

Remove your-uninstaller_your_uninstaller_7.4.2012.05_anglais_137670.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.