home

uninstall.exe

PROVISIO GmbH

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program SiteCaster Web Setup by PROVISIO Corporation.
Publisher:
PROVISIO GmbH  (signed and verified)

MD5:
d2939e76542c9076b09180e2c0544b88

SHA-1:
c5a8126dc60e5f98efbbd5854b0be1da19e09381

SHA-256:
6bbfaaf9a1a8afa9cd6bf972484ecf9727ee417918fd94ce306d46350fbd43bf

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 11:16:48 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Graftor.95461
8.15.12.15.08

File size:
128.6 KB (131,664 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\provisio\sitecaster web setup\uninstall.exe

Digital Signature
Signed by:
PROVISIO GmbH

Authority:
GlobalSign nv-sa

Valid from:
11/23/2010 7:22:11 AM

Valid to:
11/23/2013 7:22:08 AM

Subject:
E=contact-europe@provisio.com, CN=PROVISIO GmbH, O=PROVISIO GmbH, L=Muenster, S=NRW, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012C78E123B0

File PE Metadata
Compilation timestamp:
9/26/2011 9:21:33 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:5VdePelp2Xy+tuQOzOYE5aXPnyYi0Tpp4DM8cLwvLr9oXuEJMWy1nRae825E1sFy:aweqOYEUXPnt4DM8ckLZoeAMZ1nZif/

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
6.5466

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

Program Uninstaller
Program name:
SiteCaster Web Setup

Display publisher:
PROVISIO Corporation

Uninstall string:
"C:\Program Files\PROVISIO\SiteCaster Web Setup\Uninstall.exe"


Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.