» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

Shield Apps

The application unins000.exe by Shield Apps has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program PC Registry Shield by ShieldApps. This file is typically installed with the program PC Registry Shield by ShieldApps.

File name:

unins000.exe

Publisher:

Shield Apps (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

f250f21d8d450700caf9ffe35497f0d3

SHA-1:

2c2bf2beb1a80c5d9adcfd2e91b596b571fa84c9

SHA-256:

5c6a44ddcb9e165cf8f4da742008748ed8ee6a7d91e187193ef189675455c2f1

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/16/2024 12:32:50 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.1.20.10

File size:

1.1 MB (1,197,672 bytes)

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\pc registry shield\unins000.exe

Digital Signature

Signed by:

Shield Apps

Authority:

COMODO CA Limited

Valid from:

5/24/2012 2:00:00 AM

Valid to:

5/25/2013 1:59:59 AM

Subject:

CN=Shield Apps, O=Shield Apps, STREET="5042 Wilshire blvd #18607", L=Los Angeles, S=California, PostalCode=90036, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00F905A195D3B1CCF823462D6C5EEECD72

File PE Metadata

Compilation timestamp:

7/9/2012 3:41:30 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:aYwCLCUplZhgjXj8YcgoniqO3CBiO0jmS+Elzcy8ZN1Nx9Zo:VGUhni7eSRzcZtE

Entry address:

0xFCF94

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 84, AC, 4F, 00, E8, 95, BF, F0, FF, 6A, EC, A1, C4, 0D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 28, CE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, C4, 0D, 50, 00, 53, E8, 7D, D0, F0, FF, 33, C0, 55, 68, 0F, D0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, D0, C7, F0, FF, E8, DF, D9, FF, FF, A1, BC, A8, 4F, 00, 50, 68, 20, A9, 4F, 00, A1, C4, 0D, 50, 00, 8B, 00, E8, 38, EE, F7, FF, E8, 33, DA, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, CC, 76, F0, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

1005 KB (1,029,120 bytes)

Program Uninstaller

Program name:

PC Registry Shield

Display publisher:

ShieldApps

Display version:

2.0

Uninstall string:

"C:\Program Files (x86)\PC Registry Shield\unins000.exe" /silent

The file unins000.exe has been discovered within the following program.

PC Registry Shield by ShieldApps

This is 'registry cleaner' is supposed to optimize a computer by removing invalid registry entries as well as provides some additional utilities.

pcregistryshield.com

49% remove it

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.