» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

Shield Apps

The application unins000.exe by Shield Apps has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program PC Registry Shield by ShieldApps. This file is typically installed with the program PC Registry Shield by ShieldApps.

File name:

unins000.exe

Publisher:

Shield Apps (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

d5917688ed2b941a06032be73d5de9b0

SHA-1:

601289e45e11f6e835c22173dad3306675144760

SHA-256:

d4bbf417e6b5486b824f828df7abf746abe2768e6ca60fb3f488ae1f0547bd8b

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/27/2024 2:05:44 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Installer.I

14.11.9.13

File size:

1.1 MB (1,197,256 bytes)

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\pc registry shield\unins000.exe

Digital Signature

Signed by:

Shield Apps

Authority:

COMODO CA Limited

Valid from:

5/24/2012 1:00:00 AM

Valid to:

5/25/2013 12:59:59 AM

Subject:

CN=Shield Apps, O=Shield Apps, STREET="5042 Wilshire blvd #18607", L=Los Angeles, S=California, PostalCode=90036, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F905A195D3B1CCF823462D6C5EEECD72

File PE Metadata

Compilation timestamp:

7/9/2012 2:41:30 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:qYwCLCUplZhgjXj8YcgoniqO3CBiO0jmS+Elzcy8ZN1Nx9ZR:FGUhni7eSRzcZtd

Entry address:

0xFCF94

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 84, AC, 4F, 00, E8, 95, BF, F0, FF, 6A, EC, A1, C4, 0D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 28, CE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, C4, 0D, 50, 00, 53, E8, 7D, D0, F0, FF, 33, C0, 55, 68, 0F, D0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, D0, C7, F0, FF, E8, DF, D9, FF, FF, A1, BC, A8, 4F, 00, 50, 68, 20, A9, 4F, 00, A1, C4, 0D, 50, 00, 8B, 00, E8, 38, EE, F7, FF, E8, 33, DA, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, CC, 76, F0, FF... 
[+]

Entropy:

6.3847

Developed / compiled with:

Microsoft Visual C++

Code size:

1005 KB (1,029,120 bytes)

Program Uninstaller

Program name:

PC Registry Shield

Display publisher:

ShieldApps

Display version:

2.0

Uninstall string:

"C:\Program Files (x86)\PC Registry Shield\unins000.exe" /silent

The file unins000.exe has been discovered within the following program.

PC Registry Shield by ShieldApps

This is 'registry cleaner' is supposed to optimize a computer by removing invalid registry entries as well as provides some additional utilities.

pcregistryshield.com

49% remove it

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.