» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory Runtime

PoLabs Certificate

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program PoScope3 by PoLabs. This is installed with PoScope3.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by PoLabs Certificate)

Product:

Setup Factory Runtime

Description:

Setup Application

Version:

9.0.4.0

MD5:

5e58267640849d8f1e04b5c43299cb4c

SHA-1:

5aab7c7503062710636e42d6e3b9e8c5366e2c91

SHA-256:

236466472925cc46a7c97c34fd12126c729c5037481593b7a3458d38c519fd37

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 2:05:44 PM UTC (today)

File size:

1.3 MB (1,347,840 bytes)

Product version:

9.0.4.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\poscope3\uninstall.exe

Digital Signature

Signed by:

PoLabs Certificate

Authority:

PoLabs Certificate

Valid from:

11/7/2009 4:32:53 PM

Valid to:

1/1/2040 12:59:59 AM

Subject:

CN=PoLabs Certificate

Issuer:

CN=PoLabs Certificate

Serial number:

4A632E8D5C4D03A04D97F6041A8EE1AA

File PE Metadata

Compilation timestamp:

12/16/2011 7:23:46 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:JB/s9XkrGUtabZRNM5vnRCnofkCuDVw4miJV5AX+ec999treoEUXLYydFsoked/b:PsY+7u5ZCn0kDb14A9hCk0ydWel

Entry address:

0x3C2C80

Entry point:

60, BE, 00, 30, 68, 00, 8D, BE, 00, E0, D7, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1.3 MB (1,310,720 bytes)

Program Uninstaller

Program name:

PoScope3

Display publisher:

PoLabs

Display version:

3.999

Uninstall string:

"C:\Program Files\PoScope3\uninstall.exe" "/U:C:\Program Files\PoScope3\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

PoScope3 by PoLabs

www.poscope.com

About 9% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.