How to remove shift_proxy.exe

shift_proxy.exe

The module shift_proxy.exe has been detected as PUP.ShiftBrowser

shift_proxy.exe
Remove shift_proxy.exe

File Details

Product Name:

Shift
Company Name:

Shift
MD5: 91f2a370bb3ec0ce33b5cb9a7408a304
Size: 1 MB
First Published: 2025-03-27 23:01:01 (4 months ago)
Latest Published: 2025-04-04 23:01:42 (3 months ago)
Status: PUP.ShiftBrowser (on last analysis)
Analysis Date: 2025-04-04 23:01:42 (3 months ago)

Common Places:

%localappdata%\shift
%localappdata%\shift
%localappdata%\shift

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0007a780

PE Sections:

Name Size of data MD5
.text 850944 2ef6bf44e418051a1bf9c8b3051cdc11
.rdata 166912 51e574af42a0940bb9f429d26ab72399
.data 59392 1ab7dded1c05bc44d037dfae273fa85e
.pdata 29184 203f3a124331af9081d656ef4a8a96d4
.gxfg 9728 8946448a9e020329754f8a3ba35dbd27
.retplne 512 8c950f651287cbc1296bcb4e8cd7e990
.tls 512 7b418c999c80de43224520f479019d53
_RDATA 512 a68ae646f4818412db5c445be025ac77
.rsrc 2560 1e8d6992cd80a39c16a86e5dc133eca0
.reloc 5632 4f8aeecd380b44a4ba4c93208496b62c

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for shift_proxy.exe
copyright for information about shift_proxy.exe