home

uninstall.exe

Sourcefire, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Sourcefire Agent by Sourcefire, Inc..
Publisher:
Sourcefire, Inc.  (signed and verified)

MD5:
5e2c168deb140ebc424dbd40e71830ef

SHA-1:
72dbb78d9d38f8f7c21c6224fa96e3845f76072b

SHA-256:
af0de0bd9839d53e6395b741f9bb8048d4744542768bd12756bb52b62cdf15a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:57:29 AM UTC  (today)

File size:
1.5 MB (1,556,816 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\sourcefire\fireamp\3.0.6\uninstall.exe

Digital Signature
Signed by:
Sourcefire, Inc.

Authority:
VeriSign, Inc.

Valid from:
8/2/2011 7:00:00 PM

Valid to:
8/2/2014 6:59:59 PM

Subject:
CN="Sourcefire, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sourcefire, Inc.", L=Columbia, S=Maryland, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
33E1CFF8CA25E481E7E684651AFBBB5B

File PE Metadata
Compilation timestamp:
4/10/2010 7:19:38 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:+zZ5jv6blFNjiH8IwAJuFLJxlX80EPiFQHi3aIfop8HVGNM:+vvClFNjiH8I7EL/180EKFQCKnp8HVG6

Entry address:
0x3415

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, B3, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, A0, 32, 47, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
6.5879

Packer / compiler:
Nullsoft install system v2.x

Code size:
26 KB (26,624 bytes)

Program Uninstaller
Program name:
Sourcefire Agent

Display publisher:
Sourcefire, Inc.

Display version:
3.0.6.8523

Uninstall string:
"C:\Program Files\Sourcefire\fireAMP\3.0.6\uninstall.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.