» unins000.exe
Overview
Analysis
File Details
Behaviors (1)

unins000.exe

Northstone Consulting Ltd.

This is the uninstaller utility registered in the Windows Control Panel for the program BulkZip by Northstone Consulting Ltd..

File name:

unins000.exe

Publisher:

Northstone Consulting Ltd. (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

a059a052166548a4dba143f2a8789d7c

SHA-1:

4e5d76001969ea9e19304d85657b402fcc5c7d2c

SHA-256:

6577c455685afa4755da19b1db204557706a84986a9f998128389e3cf7220b29

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/27/2024 9:48:00 AM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Hoax.W32.ArchSMS.lVBc

2.1.4+

File size:

1.4 MB (1,475,880 bytes)

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\bulkzip\unins000.exe

Digital Signature

Signed by:

Northstone Consulting Ltd.

Authority:

COMODO CA Limited

Valid from:

1/27/2015 5:30:00 AM

Valid to:

1/27/2017 5:29:59 AM

Subject:

CN=Northstone Consulting Ltd., OU=Northstone Consulting Ltd., O=Northstone Consulting Ltd., STREET=Obere Waiblinger Str, STREET=147a, L=Stuttgart, S=Baden-Wuerttemberg, PostalCode=70374, C=DE

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4C89A1FDA4B2F46D0181CEAE7B5C1B3D

File PE Metadata

Compilation timestamp:

7/16/2015 6:54:21 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:FEZXjiinrzY5tO+uKE3LMT0jECZQEbLBDBEnFWsy5K7x9J:CdmbjTKlD005E

Entry address:

0x100004

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 94, DD, 4F, 00, E8, 35, 8F, F0, FF, 6A, EC, A1, 14, 3E, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, D8, 9D, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 14, 3E, 50, 00, 53, E8, 2D, A0, F0, FF, 33, C0, 55, 68, 7F, 00, 50, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 80, 97, F0, FF, E8, 7F, DA, FF, FF, A1, CC, D9, 4F, 00, 50, 68, 30, DA, 4F, 00, A1, 14, 3E, 50, 00, 8B, 00, E8, 28, C2, F7, FF, E8, D3, DA, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, 5C, 46, F0, FF... 
[+]

Entropy:

6.2132

Developed / compiled with:

Microsoft Visual C++

Code size:

1018 KB (1,042,432 bytes)

Program Uninstaller

Program name:

BulkZip

Display publisher:

Northstone Consulting Ltd.

Display version:

0.7.5.5124

Uninstall string:

"C:\Program Files (x86)\BulkZip\unins000.exe"

Scan unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.