» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

KeyFinder LTD

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Recover Keys by Recover Keys.

File name:

unins000.exe

Publisher:

KeyFinder LTD (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

e9e468c5f1880ef9cac9e93995dfb23a

SHA-1:

28101c0605b10038b74ac3a40b6777819377e5e1

SHA-256:

8b1c4965286b17aea1a5ed400cdbbe5646e50854e195d04ca013d53ff7fe22b7

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/16/2024 6:27:09 PM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

HV_ZYX_BK0848B6.TOMC

7.2.225

File size:

1.4 MB (1,449,272 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\recover keys\unins000.exe

Digital Signature

Signed by:

KeyFinder LTD

Authority:

GoDaddy.com, Inc.

Valid from:

4/26/2012 6:16:16 PM

Valid to:

4/26/2013 5:14:03 PM

Subject:

CN=KeyFinder LTD, O=KeyFinder LTD, L=Eastbourne, S="EAST SUSSEX ", C=GB

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B4B931117CAC4

File PE Metadata

Compilation timestamp:

5/29/2012 1:51:50 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:1YwCLCUplZhgjXj8YcgoniqO3CBiO0jaS+EtjC67V56/Nx97z:kGUhni7iSFCQ6LZ

Entry address:

0xFCF94

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, AC, AB, 4F, 00, E8, 95, BF, F0, FF, 6A, EC, A1, C4, 0D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 28, CE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, C4, 0D, 50, 00, 53, E8, 7D, D0, F0, FF, 33, C0, 55, 68, 0F, D0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, D0, C7, F0, FF, E8, 07, D9, FF, FF, A1, E4, A7, 4F, 00, 50, 68, 48, A8, 4F, 00, A1, C4, 0D, 50, 00, 8B, 00, E8, 38, EE, F7, FF, E8, 5B, D9, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, CC, 76, F0, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

1005 KB (1,029,120 bytes)

Program Uninstaller

Program name:

Recover Keys

Display publisher:

Recover Keys

Display version:

6.0.2.66

Uninstall string:

"C:\Program Files (x86)\Recover Keys\unins000.exe"

The file unins000.exe has been discovered within the following program.

Recover Keys by Recover Keys

Publisher's description - “Have you ever lost your keys? Perhaps, yes. In such case you can create duplicate or change the lock. What if you lost your activation keys for Windows operating system or other major software you recently purchased? It may costs you from hundreds to thousands dollars.”

recover-keys.com

4% remove it

Scan unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.