home

uninstall.exe

Setup Factory 8.0 Runtime

Coupons, Inc.

The application uninstall.exe, “Setup Application” by Coupons has been detected as a potentially unwanted program by 6 anti-malware scanners. The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Coupon Printer by Coupons.com Inc.. This file is typically installed with the program Coupon Printer by Coupons.com Incorporated which is a potentially unwanted software program.
Publisher:
Indigo Rose Corporation  (signed by Coupons, Inc.)

Product:
Setup Factory 8.0 Runtime

Description:
Setup Application

Version:
8.2.2.0

MD5:
cbf512d82cab32907f67e0fd1fe7cb7c

SHA-1:
663d4e01e470ca569d57d85df4e639e815fc6835

SHA-256:
afe6251d4f87a62a1413009f0e8eba178e4df7e07f4490c60bb29ec0d46e1509

Scanner detections:
6 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 5:41:37 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.CDB
1.3.0.4246

Clam AntiVirus
Win.Trojan.Agent-772799
0.98/19437

Dr.Web
Adware.Coupons.38
9.0.1.08

Panda Antivirus
PUP/CouponPrinter
16.01.08.11

Reason Heuristics
PUP.Coupons.IndigoRoseCorporation.Installer (M)
16.1.8.11

Trend Micro House Call
Suspicious_GEN.F47V0524
7.2.8

File size:
573.5 KB (587,312 bytes)

Product version:
8.2.2.0

Copyright:
Runtime Engine Copyright © 2010 Indigo Rose Corporation (www.indigorose.com)

Trademarks:
Setup Factory is a trademark of Indigo Rose Corporation

Original file name:
suf80_rt.exe

File type:
Executable application (Win32 EXE)

Installer:
Setup Factory

Language:
English (United States)

Common path:
C:\Program Files\coupon printer\uninstall.exe

Digital Signature
Signed by:
Coupons, Inc.

Authority:
VeriSign, Inc.

Valid from:
10/18/2012 1:00:00 AM

Valid to:
10/18/2015 12:59:59 AM

Subject:
CN="Coupons, Inc.", OU=Coupons.com, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Coupons, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3B0915310C9D42DC14785EF80FDBA531

File PE Metadata
Compilation timestamp:
6/22/2010 2:15:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:Ba4TLdRUuRA925xVk+s8z1FTFqPKPfrWPF:B3/TOMs8RVFXq

Entry address:
0x178800

Entry point:
60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.8864

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
536 KB (548,864 bytes)

Program Uninstaller
Program name:
Coupon Printer

Display publisher:
Coupons.com Inc.

Display version:
2.2.0.5

Uninstall string:
"C:\Program Files\Coupon Printer\uninstall.exe" "/U:C:\Program Files\Coupon Printer\Uninstall\uninstall.xml"


The file uninstall.exe has been discovered within the following program.

Coupon Printer  by Coupons.com Incorporated
Coupon Printer is software that allows users to build and print coupons that will be accepted at retail stores. The setup file named 'couponprinter.exe' and typically downloaded from http://cdn.coupons.com/uk.coupons.com is signed by Coupons, Inc. located in Palo Alto, CA.
www.coupons.com
74% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.