» uninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

uninstall.exe

Setup Factory 8.0 Runtime

Totalidea Software GmbH

The program is a setup application that uses the Setup Factory installer. This is the uninstaller utility registered in the Windows Control Panel for the program TweakVI by Totalidea Software. This is installed with TweakVI.

File name:

uninstall.exe

Publisher:

Totalidea Software GmbH (signed and verified)

Product:

Setup Factory 8.0 Runtime

Description:

Setup Application

Version:

8.1.1006.0

MD5:

61074d6cf378bbc8c972d760dec5aa97

SHA-1:

57d51eaeeff304b7e14b254e6e6f66e46894d9a7

SHA-256:

12af7c809f0876f8cbc52cfa40a3a9496e6480c9b3075795e5a52abaeac6ba39

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:23:02 PM UTC (today)

File size:

567.2 KB (580,776 bytes)

Product version:

8.1.1006.0

Trademarks:

Setup Factory is a trademark of Indigo Rose Corporation

Original file name:

suf80_rt.exe

File type:

Executable application (Win32 EXE)

Installer:

Setup Factory

Language:

English (United States)

Common path:

C:\windows\tweakvi\uninstall.exe

Digital Signature

Signed by:

Totalidea Software GmbH

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

8/11/2008 11:12:31 AM

Valid to:

8/11/2009 3:12:23 AM

Subject:

CN=Totalidea Software GmbH, OU=Development, O=Totalidea Software GmbH, L=Remscheid, S=NRW, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5378C2485FB9FC1B31912F3FF25A5475

File PE Metadata

Compilation timestamp:

11/6/2008 8:41:37 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:gvlsT6mYXYzYXcZtC1SCOGO1omJ1aa97pfxyuK+i3O:gTCMXuthC1jc1a05AuL

Entry address:

0x175590

Entry point:

60, BE, 00, 10, 4F, 00, 8D, BE, 00, 00, F1, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.8833

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

532 KB (544,768 bytes)

Program Uninstaller

Program name:

TweakVI

Display publisher:

Totalidea Software

Display version:

1.0 build 1105

Uninstall string:

"C:\Windows\TweakVI\uninstall.exe" "/U:C:\Program Files\TweakVI\Uninstall\uninstall.xml"

The file uninstall.exe has been discovered within the following programs.

TweakVI by Totalidea Software

www.totalidea.com

19% remove it

Scan uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.