» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory Runtime

Livescribe Inc.

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Livescribe Helper by Livescribe Inc. This file is installed with the program Livescribe Helper.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Livescribe Inc.)

Product:

Setup Factory Runtime

Description:

Setup Application

Version:

9.0.0.0

MD5:

89d09ce23f0427787f639416eaad32b0

SHA-1:

b09471ac59a939ad094023409d1ad9540e534b93

SHA-256:

ab275a574b5f66a92990a0c8bb9021118ca6df193f3f07fb2f8f6da2b31ca4df

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/19/2024 9:07:32 AM UTC (today)

Scan engine

Detection

Engine version

Zillya! Antivirus

Downloader.Small.Win32.76142

2.0.0.2510

File size:

1.3 MB (1,348,208 bytes)

Product version:

9.0.0.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\livescribe\livescribehelper\uninstall.exe

Digital Signature

Signed by:

Livescribe Inc.

Authority:

VeriSign, Inc.

Valid from:

4/3/2012 5:00:00 PM

Valid to:

3/24/2014 4:59:59 PM

Subject:

CN=Livescribe Inc., OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Livescribe Inc., L=Oakland, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

572B4E2C18CDDF481786CA557A2E894A

File PE Metadata

Compilation timestamp:

1/7/2011 7:24:41 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:/fCzsjNfM0EA/NBPidZ6D4L+9hNMQJJtuM3rbZGXkr+29qeldqgamSKrs:/KoRfMF6idZ6DiAMIUefWIVWgamS/

Entry address:

0x3C0E10

Entry point:

60, BE, 00, 20, 68, 00, 8D, BE, 00, F0, D7, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.9206

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1.2 MB (1,306,624 bytes)

Program Uninstaller

Program name:

Livescribe Helper

Display publisher:

Livescribe Inc

Display version:

1.1

Uninstall string:

"C:\Program Files (x86)\Livescribe\LivescribeHelper\uninstall.exe" "/U:C:\Program Files (x86)\Livescribe\LivescribeHelper\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Livescribe Helper by Livescribe Inc

www.livescribe.com

About 4% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.