home

uninstall.exe

Guess The Phrase

Kristanix Studios

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Guess The Phrase by Kristanix Games.
Publisher:
Kristanix Games  (signed by Kristanix Studios)

Product:
Guess The Phrase

Version:
01.00.00.00

MD5:
7633c59c82a86ea69607a1f31f7f8d47

SHA-1:
56a240b43161d985b0b87ce87fa37bdbf4b1cf4f

SHA-256:
cd0bf321c7a405e1a15d1fa6d4251c838b4ebf97af1fee83c00bb11d5f352cac

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 10:31:29 PM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Android.Trojan.Steek
8.15.11.01.04

File size:
132.7 KB (135,872 bytes)

Copyright:
© 2011 Kristanix Games

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Turkish (Turkey)

Common path:
C:\Program Files\guess the phrase\uninstall.exe

Digital Signature
Signed by:
Kristanix Studios

Authority:
The Code Project

Valid from:
2/15/2011 2:00:00 AM

Valid to:
2/16/2012 1:59:59 AM

Subject:
CN=Kristanix Studios, O=Kristanix Studios, STREET=Gravdalveien 2, L=Lierskogen, S=Buskerud, PostalCode=3420, C=NO

Issuer:
CN=The Code Project Code Signing CA, O=The Code Project, C=CA

Serial number:
250FA91C491B63B49884CA3263C0B7D0

File PE Metadata
Compilation timestamp:
6/7/2009 12:44:26 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:vCUm7KFP2QuXYdsLP0DgXJFiYgdLeAyN/tIek9t2esLqU+or/FEnboau:vCuFP2lXIHDgXJFJceAQt/+4E87

Entry address:
0x355E

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B8, A7, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 80, 40, 00, 53, FF, 15, 88, 82, 40, 00, 6A, 08, A3, 98, 10, 43, 00, E8, D6, 2E, 00, 00, A3, E4, 0F, 43, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, E8, A7, 42, 00, FF, 15, 58, 81, 40, 00, 68, AC, A7, 40, 00, 68, E0, 07, 43, 00, E8, DC, 29, 00, 00, FF, 15, AC, 80, 40, 00, BF, 00, 70, 43, 00, 50, 57, E8, CA, 29, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

Program Uninstaller
Program name:
Guess The Phrase

Display publisher:
Kristanix Games

Display version:
01.00.00.00

Uninstall string:
C:\Program Files (x86)\Guess The Phrase\uninstall.exe


Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.