» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory Runtime

Livescribe Inc.

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Echo Desktop by Livescribe Inc. This file is installed with the program Echo Desktop.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Livescribe Inc.)

Product:

Setup Factory Runtime

Description:

Setup Application

Version:

9.0.4.0

MD5:

5b1e651d4c9f9e0c8aa8d90a9732cb45

SHA-1:

323f77bb81b156a84a7103f05a59579022807fe4

SHA-256:

7284b89ef7026647295a6f46d5ebe0435df2908025f9b14111765ac6fd0481cb

Scanner detections:

1 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

1/3/2026 12:26:43 AM UTC (today)

Scan engine

Detection

Engine version

F-Secure

Gen:Variant.Adware.Netfilter.2

5.13.68

File size:

1.3 MB (1,351,008 bytes)

Product version:

9.0.4.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\livescribe\uninstall.exe

Digital Signature

Signed by:

Livescribe Inc.

Authority:

VeriSign, Inc.

Valid from:

6/22/2014 8:00:00 PM

Valid to:

4/18/2015 7:59:59 PM

Subject:

CN=Livescribe Inc., O=Livescribe Inc., L=Oakland, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

52BC423895BAA33841EAACB8E7E0DACC

File PE Metadata

Compilation timestamp:

12/16/2011 1:23:46 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:RB/s9XkrGUtabZRNM5vnRCnofkCuDVw4miJV5AX+ec999treoEUXLYydFsoked/:HsY+7u5ZCn0kDb14A9hCk0ydWe

Entry address:

0x3C2C80

Entry point:

60, BE, 00, 30, 68, 00, 8D, BE, 00, E0, D7, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.9207

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1.3 MB (1,310,720 bytes)

Program Uninstaller

Program name:

Echo Desktop

Display publisher:

Livescribe Inc

Display version:

3.0.1

Uninstall string:

"C:\Program Files (x86)\Livescribe\uninstall.exe" "/U:C:\Program Files (x86)\Livescribe\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Echo Desktop by Livescribe Inc

www.livescribe.com

About 9% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.