» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Synthetic Aperture

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program Test Gear by Synthetic Aperture. This is installed with Test Gear.

File name:

uninstall.exe

Publisher:

Indigo Rose Corporation (signed by Synthetic Aperture)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.2.2.0

MD5:

1cbf17b2a1766d2d6ad13b5948035f8e

SHA-1:

c3f17e35890203b93f032499b8f34d1b152659b8

SHA-256:

3196c976535d2fa6594a7b2686d51be0bd0147f0fd4cd5c330337313003a963b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/1/2024 6:17:05 AM UTC (today)

File size:

571.9 KB (585,632 bytes)

Product version:

8.2.2.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\Program Files\test gear\uninstall.exe

Digital Signature

Signed by:

Synthetic Aperture

Authority:

Thawte, Inc.

Valid from:

8/11/2010 2:00:00 AM

Valid to:

8/11/2012 1:59:59 AM

Subject:

CN=Synthetic Aperture, O=Synthetic Aperture, L=San Juan Capistrano, S=California, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

7449964C91C58C053C5381DCF8E495CA

File PE Metadata

Compilation timestamp:

6/22/2010 3:15:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:Ba4TLdRUuRA925xVk+s8z1FTFqPKPfrWPFA:B3/TOMs8RVFXqA

Entry address:

0x178800

Entry point:

60, BE, 00, 30, 4F, 00, 8D, BE, 00, E0, F0, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

536 KB (548,864 bytes)

Program Uninstaller

Program name:

Test Gear

Display publisher:

Synthetic Aperture

Display version:

2.5.3

Uninstall string:

"C:\Program Files (x86)\Test Gear\uninstall.exe" "/U:C:\Program Files (x86)\Test Gear\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following program.

Test Gear by Synthetic Aperture

www.synthetic-ap.com

About 9% of users remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.