The unins000 exe File Malware Analysis

The unins000.exe File Analysis

Updated 1 month ago

Checked by Malware Check

unins000.exe

Hash Type	Value	Action
MD5	abb481ca9257fcfb729472ad3482d585
SHA1	d8b4ff774486e3fb6826e03b75fcd4ddd95127a1
SHA256	84c448129ede73aaf98025a2cb34758beaeed7510a937fd43b05bfe4e1aa6491
SHA512	df0a0df49b5a33c92cfa860594f0da5621c46de0d2dc3714e95de505fb1125ac157c112b5409165358db5e09668dabf44e902cd6c5114c2d71dbdb801ae86a18
ImpHash	ccd5f2ad4761330df297d2ddedcd8ed3

Hash Type

Value

Action

MD5

abb481ca9257fcfb729472ad3482d585

SHA1

d8b4ff774486e3fb6826e03b75fcd4ddd95127a1

SHA256

84c448129ede73aaf98025a2cb34758beaeed7510a937fd43b05bfe4e1aa6491

SHA512

df0a0df49b5a33c92cfa860594f0da5621c46de0d2dc3714e95de505fb1125ac157c112b5409165358db5e09668dabf44e902cd6c5114c2d71dbdb801ae86a18

ImpHash

ccd5f2ad4761330df297d2ddedcd8ed3

PE Analysis

Basic Information

▼

Icon	Hash: 848ab4e16fa4c55d7785b59f1fefca56 Fuzzy: 0e2d41d4b641988a322dcf17bfd73842 dHash: 91236f2c6c7e1f3b
Image Base	`0x00400000`
Entry Point	`0x004ff004`
Compilation Time	2014-07-09 07:58:14
Checksum	0x00000000 (Actual: 0x0016d548)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	12 libraries
Exports	0 functions
Resources	56 Resources
Sections	8 Sections

Version Information

▼

FileDescription	Setup/Uninstall
FileVersion	51.1052.0.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,036,248 bytes	1,036,288 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F07528AD00EF563F25B078973AB74526`
`.itext`	`0x000fe000`	4,640 bytes	5,120 bytes	5.69 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EE1623FB4BFBF53C6D7A796FEE40C5B0`
`.data`	`0x00100000`	12,344 bytes	12,800 bytes	4.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A563250498ABF40B0297B5B019D7ED90`
`.bss`	`0x00104000`	24,972 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0010b000`	14,304 bytes	14,336 bytes	5.25 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`81C7429C9619A00840C630C4427DC350`
`.tls`	`0x0010f000`	60 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00110000`	24 bytes	512 bytes	0.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`543246B7273241D8E173A5D9DCB01E12`
`.rsrc`	`0x00111000`	380,708 bytes	380,928 bytes	7.18 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1928E6430601E02F7AABBE1673F13BCC`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 56 (377,360 bytes)

Resource Type	Count	Total Size	Percentage
RT_CURSOR	7	2,156 bytes	0.6%
RT_BITMAP	2	1,488 bytes	0.4%
RT_ICON	8	281,990 bytes	74.7%
RT_STRING	17	11,224 bytes	3%
RT_RCDATA	12	78,384 bytes	20.8%
RT_GROUP_CURSOR	7	140 bytes	0%
RT_GROUP_ICON	1	118 bytes	0%
RT_VERSION	1	348 bytes	0.1%
RT_MANIFEST	1	1,512 bytes	0.4%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	unins000.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-06 13:00:17 UTC

The unins000.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification