» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Data Protecto

Outreach Global Ltd

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program DataProtecto by XCloudSystems. This file is installed with the program DataProtecto.

File name:

uninstall.exe

Publisher:

XCloud Systems (signed by Outreach Global Ltd)

Product:

Data Protecto

Description:

Data Protecto Setup

Version:

2. 0. 1

MD5:

05874cd32a340e8b652a4b857e7ffd32

SHA-1:

30e669a2dfe4d49ccc575b687c440316f82d45ba

SHA-256:

d892bfb59499bd3d0afbf87635e20fc1119e2109cd5156398335580d083a3b80

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 8:53:05 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Crypt.TPM.Gen

7.11.130.240

Rising Antivirus

PE:Malware.XPACK/RDM!5.1

23.00.65.14719

Trend Micro House Call

TROJ_GEN.F47V0204

7.2.202

File size:

15.2 MB (15,928,120 bytes)

Product version:

2. 0. 1

Original file name:

Data-Protecto.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\xcloudsystems\dataprotecto\uninstall.exe

Digital Signature

Signed by:

Outreach Global Ltd

Authority:

GlobalSign nv-sa

Valid from:

4/16/2013 12:33:14 PM

Valid to:

4/17/2014 12:33:14 PM

Subject:

CN=Outreach Global Ltd, O=Outreach Global Ltd, S=Tortola, C=VG

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11215E3AC969D48691A04282ED4EE159C07C

File PE Metadata

Compilation timestamp:

1/31/2014 11:01:07 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:CtqPMiOeN3d/C9A9pkC0hppbE0ONGMsozOS12xoJpc:XPxOst/CckFrwNGMNzfR2

Entry address:

0x14E5000

Entry point:

83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, F0, 22, 00, 2D, 2F, 60, 0A, 10, 05, 24, 60, 0A, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, C3, 46, CF, 72, 68, A0, F5, 1A, 5F, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 74, 0B, 0E, BF, BE, 70, F2, B3, B6, 4F, 9C, 74, 6B, 67... 
[+]

Entropy:

7.9883 (probably packed)

Code size:

482.5 KB (494,080 bytes)

Program Uninstaller

Program name:

DataProtecto

Display publisher:

XCloudSystems

Uninstall string:

"C:\Program Files (x86)\XCloudSystems\DataProtecto\uninstall.exe" -u

The file uninstall.exe has been discovered within the following program.

DataProtecto by XCloudSystems

About 1% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.