» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Synthetic Aperture

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Color Finesse by Synthetic Aperture. This is installed with Color Finesse.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Synthetic Aperture)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

c64ebcedeb8363142742f5b83253116e

SHA-1:

72a8371da5d093a7ac8828e7f04cee3f0a9138ec

SHA-256:

67c708890285e01bfe9910590141eb65383c37c3a942a19effd51b3df0ada958

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 8:11:15 AM UTC (today)

File size:

571.9 KB (585,600 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\color finesse\uninstall.exe

Digital Signature

Signed by:

Synthetic Aperture

Authority:

Thawte, Inc.

Valid from:

8/11/2010 2:00:00 AM

Valid to:

8/11/2012 1:59:59 AM

Subject:

CN=Synthetic Aperture, O=Synthetic Aperture, L=San Juan Capistrano, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7449964C91C58C053C5381DCF8E495CA

File PE Metadata

Compilation timestamp:

6/22/2010 3:15:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:/a4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFv:/3/TOMs8RVFXqv

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

Program Uninstaller

Program name:

Color Finesse

Display publisher:

Synthetic Aperture

Display version:

3.0.4

Uninstall string:

"C:\Program Files (x86)\Color Finesse\uninstall.exe" "/U:C:\Program Files (x86)\Color Finesse\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Color Finesse by Synthetic Aperture

www.synthetic-ap.com

About 2% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.