» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Synthetic Aperture

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Color Finesse by Synthetic Aperture. This is installed with Color Finesse.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Synthetic Aperture)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

fda6f20a5a99739f0bc91f1f86a8fc98

SHA-1:

b7eeab19306c7b47a491cdbad94ad0e094be541e

SHA-256:

8305ff51b4747ccd5e4d3bfaeb7abffa287deedcaf52b8777436c67fcf9af137

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 8:13:08 AM UTC (today)

File size:

571.9 KB (585,600 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\color finesse\uninstall.exe

Digital Signature

Signed by:

Synthetic Aperture

Authority:

Thawte, Inc.

Valid from:

8/11/2010 2:00:00 AM

Valid to:

8/11/2012 1:59:59 AM

Subject:

CN=Synthetic Aperture, O=Synthetic Aperture, L=San Juan Capistrano, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7449964C91C58C053C5381DCF8E495CA

File PE Metadata

Compilation timestamp:

6/22/2010 3:15:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:qa4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFe:q3/TOMs8RVFXqe

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8862

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

Program Uninstaller

Program name:

Color Finesse

Display publisher:

Synthetic Aperture

Display version:

3.0.2

Uninstall string:

"C:\Program Files (x86)\Color Finesse\uninstall.exe" "/U:C:\Program Files (x86)\Color Finesse\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Color Finesse by Synthetic Aperture

www.synthetic-ap.com

About 2% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.