home

uninstall.exe

Pavlo Matviienko

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program File Encryption XP by CP Lab.
Publisher:
Pavlo Matviienko  (signed and verified)

MD5:
5a54245aefd9b4032ec41429ff76857d

SHA-1:
9553fbeb1ccaadea3d6e0dbe5ae32751ec1215c9

SHA-256:
49a329eb89c422d1669ef2226132edece1569a08029355fd70efd085d61646bf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:34:24 AM UTC  (today)

File size:
109.2 KB (111,792 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\file encryption xp\uninstall.exe

Digital Signature
Signed by:
Pavlo Matviienko

Authority:
StartCom Ltd.

Valid from:
8/19/2012 3:39:30 PM

Valid to:
8/21/2014 10:54:15 AM

Subject:
E=pavel.matvienko@cp-lab.com, CN=Pavlo Matviienko, L=Kiev, S=Kyyiv, C=UA, Description=lPEE8tQM8d41CxsR

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0702

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:+pgpHzb9dZVX9fHMvG0D3XJ//+/9l/B2U+or/AEnbo/Ifbmsi:EgXdZt9P6D3XJ//+/Zz+9E8Afiz

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

Program Uninstaller
Program name:
File Encryption XP

Display publisher:
CP Lab

Uninstall string:
"C:\Program Files (x86)\File Encryption XP\uninstall.exe"


Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.