home

uninst.exe

Visan Industries

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program HP Photo Creations by HP Photo Creations Powered by RocketLife.
Publisher:
Visan Industries  (signed and verified)

MD5:
2b6c4450f30daa029e0b2fc17b06aa21

SHA-1:
4f8196b522c6936a548610cb205653eb536a1e0d

SHA-256:
d9131f084aef90fe5457ecb72850afeaccaf99a2981c9a2543062b613120a353

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 12:39:05 AM UTC  (today)

File size:
200 KB (204,800 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\hp photo creations\uninst.exe

Digital Signature
Signed by:
Visan Industries

Authority:
Thawte, Inc.

Valid from:
9/15/2010 5:30:00 AM

Valid to:
9/16/2011 5:29:59 AM

Subject:
CN=Visan Industries, OU=SECURE APPLICATION DEVELOPMENT, O=Visan Industries, L=Folsom, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3C3098E952CB15050CA6EACB5FC0E659

File PE Metadata
Compilation timestamp:
4/10/2010 5:49:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:jNszWOITsEL50jl7yrEkfBgl4qTbitvKKW/ihYDS7/tN2dp161LFttPf72KqEr:uzZZuE/ljbOW/BOrt8dpgXLn72K1

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.6918

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
HP Photo Creations

Display publisher:
HP Photo Creations Powered by RocketLife

Display version:
1.0.0.${CAB_VERSION}

Uninstall string:
"C:\Program Files (x86)\HP Photo Creations\uninst.exe"


Scan uninst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.