» uninstall elbaneu.exe
Overview
Analysis
File Details
Behaviors (1)

uninstall elbaneu.exe

InstallAnywhere

RACON Software GmbH

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program telebankingMBS (C:\Program Files (x86)\ELBA5) by RACON Software GmbH.

File name:

Publisher:

Flexera Software (signed by RACON Software GmbH)

Product:

InstallAnywhere

Description:

LaunchAnywhere

Version:

11, 0, 0, 0

MD5:

60616a1ce8f747f1f0f6bb32e4bdd849

SHA-1:

bb26feff46cf195449b03c347f6a15cb357c8295

SHA-256:

14b7ffc317204537f60c98ef146c2b45d905495ed92e240a2552306c1933b846

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/24/2024 9:42:32 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

File size:

126.3 KB (129,360 bytes)

Product version:

11, 0, 0, 0

Original file name:

gui.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\elba5\uninstallerdata\uninstall elbaneu.exe

Digital Signature

Signed by:

RACON Software GmbH

Authority:

VeriSign, Inc.

Valid from:

8/4/2011 2:00:00 AM

Valid to:

8/4/2014 1:59:59 AM

Subject:

CN=RACON Software GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=RACON Software GmbH, L=Linz, S=Upper Austria, C=AT

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6C81AA31DAFFFE026598F62FE9008A9B

File PE Metadata

Compilation timestamp:

2/11/2010 12:05:58 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

3072:EyFXgn4KKv4CKyZ+iO5tn7Rd6jiN5d3KADXwBVHe48X:bxKKcPt2jCKAy8X

Entry address:

0x15244

Entry point:

B8, EC, 38, 44, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 46, A2, C0, 9D, 3E, DC, 55, 10, 0C, CC, 35, 7E, 10, 90, 6D, 36, 21, 20, B6, 08, 40, 1A, 1A, 25, B4, 12, D6, 96, 0C, 4B, 78, 5C, 52, 2D, 51, 76, C9, B9, 04, 0C, 25, F7, 92, 4A, 24, A1, D6, 2A, 19, 95, 68, AF, 84, 56, D2, D2, 12, 64, 49, A4, 4B, BA, 25, 80, 2F, A1, 97, 47, 00, F8, C8, 6D, 33, 1E, F8, 72, CD, 13, 7A, B6, 11, 40, 15, 40, 4B, 88, 25, 82, 2E, E1, 96, C9, BD... 
[+]

Packer / compiler:

PECompact v2

Code size:

140 KB (143,360 bytes)

Program Uninstaller

Program name:

telebankingMBS (C:\Program Files (x86)\ELBA5)

Display publisher:

RACON Software GmbH

Display version:

5.4.1.0

Uninstall string:

"C:\Program Files (x86)\ELBA5\UninstallerData\Uninstall elbaneu.exe"

Scan uninstall elbaneu.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.