» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

Shield Apps

The application unins000.exe by Shield Apps has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program PC Registry Shield by ShieldApps. This file is typically installed with the program PC Registry Shield by ShieldApps.

File name:

unins000.exe

Publisher:

Shield Apps (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

22d74beeccf23ec86157655d7f5b78a7

SHA-1:

5d6d545080e4b22ca032ee8eefea26d7a68201bd

SHA-256:

0234d9380777cfa7e6d4d4cfae93ae5a27443e2f10fa9f4ce8e2d9e418e5e6c1

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 1:25:59 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic.ShieldApps.Installer.Meta

15.11.10.14

File size:

1.1 MB (1,190,088 bytes)

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\pc registry shield\unins000.exe

Digital Signature

Signed by:

Shield Apps

Authority:

COMODO CA Limited

Valid from:

5/23/2012 8:00:00 PM

Valid to:

5/24/2013 7:59:59 PM

Subject:

CN=Shield Apps, O=Shield Apps, STREET="5042 Wilshire blvd #18607", L=Los Angeles, S=California, PostalCode=90036, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F905A195D3B1CCF823462D6C5EEECD72

File PE Metadata

Compilation timestamp:

10/30/2010 4:54:54 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:f43B3soIVgjal+VKnI2zwyBCSdZqyT6fETf+7Z1mZBHx9kd:Q3DYwO6l7enE

Entry address:

0xFAF7C

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, D4, 90, 4F, 00, E8, AD, DF, F0, FF, 6A, EC, A1, 6C, ED, 4F, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 48, EE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 6C, ED, 4F, 00, 53, E8, 9D, F0, F0, FF, 33, C0, 55, 68, F7, AF, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, F0, E7, F0, FF, E8, 47, DE, FF, FF, A1, 0C, 8D, 4F, 00, 50, 68, 70, 8D, 4F, 00, A1, 6C, ED, 4F, 00, 8B, 00, E8, 58, 0E, F8, FF, E8, 9B, DE, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, E4, 96, F0, FF... 
[+]

Entropy:

6.3879

Developed / compiled with:

Microsoft Visual C++

Code size:

998 KB (1,021,952 bytes)

Program Uninstaller

Program name:

PC Registry Shield

Display publisher:

ShieldApps

Display version:

2.0

Uninstall string:

"C:\Program Files (x86)\PC Registry Shield\unins000.exe" /silent

The file unins000.exe has been discovered within the following program.

PC Registry Shield by ShieldApps

This is 'registry cleaner' is supposed to optimize a computer by removing invalid registry entries as well as provides some additional utilities.

pcregistryshield.com

49% remove it

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.