home

uninstall.exe

Piffle LLC

This is the uninstaller utility registered in the Windows Control Panel for the program Pictura by Piffle. This is installed with Pictura. The file has been seen being downloaded from madebysource.com.
Publisher:
Piffle LLC  (signed and verified)

MD5:
6ffa68a692bd13ba26197f493c597d9a

SHA-1:
0e50e8bfbb6edd289a21e509f315509a48eac14e

SHA-256:
b9d86ea21493ae14928933306842fa365e1f6762ae6b86589b290bfce5b7dbdd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 5:59:13 PM UTC  (today)

File size:
38.6 MB (40,517,848 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\application data\com.madebysource.pictura\uninstall.exe

Digital Signature
Signed by:
Piffle LLC

Authority:
GoDaddy.com, Inc.

Valid from:
3/21/2013 8:51:24 PM

Valid to:
3/21/2015 1:19:45 AM

Subject:
CN=Piffle LLC, O=Piffle LLC, L=New York, S=NY, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
079A342FF699ED

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.24

CTPH (ssdeep):
393216:SxDtgAHsOhJyGw2bG4vuHHKi+P5o0KdPhSIb1Xor0865x7hrpSvz5fhAEgrTPPzW:u1HsnOGnEK1EYv5V5ro

Entry address:
0x12A0

Entry point:
83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, D0, BC, A9, 02, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 58, BD, A9, 02, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, 0C, BD, A9, 02, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 53, 83, EC, 14, C7, 04, 24, 00, 00, D0, 00, E8, ED, 50, 77, 00, 89, C3, 83, EC, 04, B8, 70, 18, B9, 00, 85, DB, 74, 27, C7, 04, 24, 00, 00, D0, 00, E8, DB, 50, 77, 00, 83, EC, 04, A3, 60, A7, A9, 02, C7, 44, 24, 04, 13, 00, D0, 00, 89, 1C, 24...
 
[+]

Entropy:
7.1023

Code size:
8.9 MB (9,369,088 bytes)

Program Uninstaller
Program name:
Pictura

Display publisher:
Piffle

Uninstall string:
C:\ProgramData\com.madebysource.pictura\uninstall.exe /uninstall


The file uninstall.exe has been discovered within the following program.

Pictura  by Piffle
About 1% of users remove it
 
Powered by Should I Remove It?

The file uninstall.exe has been seen being distributed by the following URL.

https://madebysource.com/download/pictura/.../

Scan uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.