home

uninstall.exe

RonyaSoft

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program RonyaSoft Poster Printer (ProPoster) 3.02 by RonyaSoft.
Publisher:
RonyaSoft  (signed and verified)

MD5:
dcaff75a85520f4b2bb8a25cfaae9ddc

SHA-1:
369d0a3819a2f77fe53b1de73cbbced7dbde9536

SHA-256:
8799e8d5d91c24bde8200bd33ef6f609a12bd0122fd3b5d333a1725faf26ab00

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 8:50:09 AM UTC  (today)

Scan engine
Detection
Engine version

nProtect
Trojan/W32.Agent.263872
15.12.04.01

File size:
257.7 KB (263,872 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\ronyasoft\poster printer\uninstall.exe

Digital Signature
Signed by:
RonyaSoft

Authority:
COMODO CA Limited

Valid from:
4/1/2014 2:00:00 AM

Valid to:
4/2/2019 1:59:59 AM

Subject:
CN=RonyaSoft, O=RonyaSoft, STREET=Sobornosti 4 / 215, STREET=Lutsk, L=Lutsk, S=Volyn, PostalCode=43026, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
61598F11C1ECCE62934A238D9723FD6D

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:WQqnM5/YXq245Gh27Jn1pjari2Ebr7HECH2hCKl:0u/A488R1pjz2MkCHOl

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

Program Uninstaller
Program name:
RonyaSoft Poster Printer (ProPoster) 3.02

Display publisher:
RonyaSoft

Display version:
3.02

Uninstall string:
C:\Program Files (x86)\RonyaSoft\Poster Printer\Uninstall.exe


Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.