home

uninstall.exe

RonyaSoft

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program RonyaSoft Poster Printer (ProPoster) 3.02 by RonyaSoft.
Publisher:
RonyaSoft  (signed and verified)

MD5:
5df9fc318efd3efbbbbe136484d8c93e

SHA-1:
e837748b41317e4092b99a7e63f27bbf87fcf0e8

SHA-256:
32938c4719a339880688bc71565045f110e3579ab7248729180f6b7fa059e0a6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 10:23:27 AM UTC  (today)

Scan engine
Detection
Engine version

nProtect
Trojan/W32.Agent.263872
15.11.13.01

File size:
257.7 KB (263,872 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\ronyasoft\poster printer\uninstall.exe

Digital Signature
Signed by:
RonyaSoft

Authority:
COMODO CA Limited

Valid from:
3/31/2014 8:00:00 PM

Valid to:
4/1/2019 7:59:59 PM

Subject:
CN=RonyaSoft, O=RonyaSoft, STREET=Sobornosti 4 / 215, STREET=Lutsk, L=Lutsk, S=Volyn, PostalCode=43026, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
61598F11C1ECCE62934A238D9723FD6D

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:5QqnM5/YXq245Gh27Jn1pjari2Ebr7HECH2hCKc:vu/A488R1pjz2MkCHOc

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.3320

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

Program Uninstaller
Program name:
RonyaSoft Poster Printer (ProPoster) 3.02

Display publisher:
RonyaSoft

Display version:
3.02

Uninstall string:
C:\Program Files (x86)\RonyaSoft\Poster Printer\Uninstall.exe


Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.