» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Synthetic Aperture

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Color Finesse by Synthetic Aperture. This is installed with Color Finesse.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Synthetic Aperture)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

c381ea560374d3822c1637716e7f4b25

SHA-1:

222fedea6646e00e97b9e15228afd6773b30fabd

SHA-256:

8d0b9ea561cc6348ed963c8ef75ae49a9edff8a7af94597aa066a4587f43c24b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:12:38 PM UTC (a few moments ago)

File size:

572.6 KB (586,336 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\color finesse\uninstall.exe

Digital Signature

Signed by:

Synthetic Aperture

Authority:

Thawte, Inc.

Valid from:

7/4/2012 2:00:00 AM

Valid to:

8/11/2014 1:59:59 AM

Subject:

CN=Synthetic Aperture, O=Synthetic Aperture, L=San Juan Capistrano, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

2A72DF1122155D7C39267BC737A94339

File PE Metadata

Compilation timestamp:

6/22/2010 3:15:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:Da4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFg:D3/TOMs8RVFXqg

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

Program Uninstaller

Program name:

Color Finesse

Display publisher:

Synthetic Aperture

Display version:

3.0.10

Uninstall string:

"C:\Program Files (x86)\Color Finesse\uninstall.exe" "/U:C:\Program Files (x86)\Color Finesse\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Color Finesse by Synthetic Aperture

www.synthetic-ap.com

About 2% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.