unins000.exe
Setup/Uninstall file version info
Program on Windows 29 known copies with hashes
Is it the real unins000.exe?
WinSCP-5.17.7-Setup.exe in the file’s header: a renamed copy still carries itC:\Program Files\Microsoft VS Code\C:\Program Files (x86)\K-Lite Codec Pack\C:\Program Files (x86)\Microsoft\Skype for Desktop\29 known copies
51.1052.0.0 · C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe · not signed
132e6b2ab43db385339d5be94d237519bd2513495de1c8d78eb65b38289ad85551.1052.0.0 · C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe · signed by Skype Software Sarl
1f038cdceea29cbe90255c9da9f4a786bd8bf6fc75d1bfdba7b6bc5181196e0351.1052.0.0 · C:\program files (x86)\Microsoft\Skype for Desktop\unins000.exe · signed by Skype Software Sarl
2133136330f0e09f19e42b296c6161cd5169914236a536f541139be2275f40c551.1052.0.0 · C:\program files\GIMP 2\uninst\unins000.exe · signed by Jernej Simoni
22f60b108980b99495e32145178b861c0623965394a07d856407ffd6d916860351.1052.0.0 · C:\program files\WinMerge\unins000.exe · not signed
2351e76c951c15569803cf91556464ea768a54db85c1908c82affdc0ff15cc4151.1052.0.0 · C:\Program Files\Combined Community Codec Pack 64bit\unins000.exe · signed by Open Source Developer
272de1b270d6a8a4e18ad4bda6eeb0d49eec431b96424b9ad8121a18f0bc181451.1052.0.0 · C:\Program Files (x86)\MediaMonkey\unins000.exe · not signed
2e2e1775cbe1699421e05eb40910b07b4a6491f6c8b7af119040509a391b0dcd51.1052.0.0 · C:\Program Files\VS Revo Group\Revo Uninstaller\unins000.exe · not signed
31669c5ed708e80da278fec825a308214db47c07da3186801c2744608f76601751.1052.0.0 · C:\program files (x86)\K-Lite Codec Pack\unins000.exe · not signed
36195b6be384005a7d08c023e6ce5907cbea72cd02b67ba3906368685ed9258f51.1052.0.0 · C:\Program Files (x86)\WinSCP\unins000.exe · signed by Martin Prikryl
3a299a5666724bed608d34ef47b9b99dfc6867cb6dd0d1b6998f4d01b4f1e0c851.1052.0.0 · C:\Program Files (x86)\Spybot - Search & Destroy 2\unins000.exe · signed by Safer-Networking Ltd.
4056b696a6f0cf25da18072232dcff384d1c73ac2f3346b076e39c363075245451.1052.0.0 · C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe · not signed
4df2e14b7cbb1ee2685ee47399e8722ebe76733f627303d2954fa66606cac6c651.1052.0.0 · C:\Program Files\WinMerge\unins000.exe · not signed
504c4c67381b1d75470224ee5fc56959dccf3762aa7d9cd2866be97dc63f6e7b51.1052.0.0 · C:\Program Files\ShareX\unins000.exe · not signed
5a41102bb8feb1f324c8c7ba83f6a0c9744355a4c8a6ae51809651a70873c9a951.1052.0.0 · C:\Program Files\Greenshot\unins000.exe · signed by Open Source Developer
655da9c7f64ef8f0f48160c76b8dc5443aaba63e8c6b3534a266e9cd5a18489f51.1052.0.0 · C:\Program Files (x86)\Foxit Software\Foxit Reader\unins000.exe · signed by FOXIT SOFTWARE INC.
6e4b124d2be68d0be4852bc870437c26df63592fae7820481d382422470c28f651.1052.0.0 · C:\Program Files (x86)\Audacity\unins000.exe · not signed
7389728aa77af2531ee7075202e4981484c63c26d771e8521c0c22c67a65827451.1052.0.0 · C:\Program Files\TeraCopy\unins000.exe · signed by Code Sector
7704a152b705ab0a1e4a605b590972d2b0cfe83d363e27ce846e847134135fcb51.1052.0.0 · C:\Program Files\PeaZip\unins000.exe · not signed
8006ad4860f93e301798e7e8b8a8e721eaabbd0a8bd1656c2518f5a5fc36b6b551.1052.0.0 · C:\Program Files\Microsoft VS Code\unins000.exe · signed by Microsoft Corporation
8406dc72f045f45cc822f6229d089e21755433031743adf438526c8e19719a2c51.1052.0.0 · C:\Program Files\Microsoft VS Code\unins000.exe · signed by Microsoft Corporation
85ee6410620f6a66d7abe1e1d2e270891fc8633460784e554ca89a13a5b3892b51.1052.0.0 · C:\Program Files\Microsoft VS Code\unins000.exe · signed by Microsoft Corporation
85f6510e2f345e1ba771e8dc566689ccf34638112907aa6b1f77dc45827f225751.1052.0.0 · C:\Program Files (x86)\WinSCP\unins000.exe · signed by Martin Prikryl
8ac87c5e688543428b88d96d59f08c15baab5ae0ac04f2743376353e3ad7462551.1052.0.0 · C:\Program Files (x86)\Microsoft\Skype for Desktop\unins000.exe · signed by Skype Software Sarl
90b78aced65a93e461edf03873713acf6d0fa7f937527c9073e3d1c656840aeb51.1052.0.0 · C:\Program Files\CDBurnerXP\unins000.exe · not signed
9e8aa678d4f49c4646e1c9edaba0cc287fdd406bed1d065f6ad3e26f5dc897b051.1052.0.0 · C:\Program Files (x86)\XnView\unins000.exe · signed by Pierre GOUGELET
b694d0527ad7720af2810af32a6340c3e75a5dace2dfa11d37e48ddab133d4bc51.1052.0.0 · C:\program files\Microsoft VS Code\unins000.exe · signed by Microsoft Corporation
e6bdbddf671acad148438ecc7ced2425a2e494e1dbb742a218c8248538cc5f8a51.1052.0.0 · C:\Program Files (x86)\KeePass Password Safe 2\unins000.exe · not signed
ec58fb24f1b062163d583812f4a2496fdd26747dd22f89769e5f10b52af30f8151.51.0.0 · C:\Program Files (x86)\Launchy\unins000.exe · not signed
e5477aa87245878531967e6011725af58b1f50bd9e316112477c7e4b25ca93f9From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.