» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Synthetic Aperture

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Color Finesse by Synthetic Aperture. This is installed with Color Finesse.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Synthetic Aperture)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

ed1ecf0f6f40d6e3a247600302b3fd48

SHA-1:

2062b02402342311362a0ce7f95934085ee0adc1

SHA-256:

c1f13476a8db13bed7e7464652b308bb0858e756ea902f8c6f63d968abd46b0e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 7:20:15 AM UTC (today)

File size:

571.9 KB (585,600 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\color finesse\uninstall.exe

Digital Signature

Signed by:

Synthetic Aperture

Authority:

Thawte, Inc.

Valid from:

8/11/2010 3:00:00 AM

Valid to:

8/11/2012 2:59:59 AM

Subject:

CN=Synthetic Aperture, O=Synthetic Aperture, L=San Juan Capistrano, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7449964C91C58C053C5381DCF8E495CA

File PE Metadata

Compilation timestamp:

6/22/2010 4:15:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:ha4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFz:h3/TOMs8RVFXqz

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8862

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

Program Uninstaller

Program name:

Color Finesse

Display publisher:

Synthetic Aperture

Display version:

3.0.3

Uninstall string:

"C:\Program Files (x86)\Color Finesse\uninstall.exe" "/U:C:\Program Files (x86)\Color Finesse\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Color Finesse by Synthetic Aperture

www.synthetic-ap.com

About 2% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.