Gridinsoft Logo
File Icon

The unins000.exe (Setup/Uninstall) File Analysis

Technical Analysis

File Name unins000.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-05 09:00:16 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
698,833
File Size (bytes)
2025-05-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
88ebf389cc8b8b30a74e9490a99c5c4f
SHA1
edf63f04daea9f7ba90a31bf33dfab360a4037eb
SHA256
b6dea679c6cbe3887399aae9c25385d56679d404a03efa135f9b50bc7b579542
SHA512
34f6995fbbab36fa146a015061881c9c65bf4dab923f52ff422e41b4a3650a75dd4f2c29020f5b09871e1f20d37520f1df063b0770589dd4a95c30978993ea82
ImpHash
8c4dc1fd8c5de32c5f78cf7b057b0119

PE Analysis

Basic Information

Icon
Hash: 30adcb5c0b2e3c35eaec2c110733c9f8
Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826
dHash: 92e0b496a6cada72
Image Base 0x00400000
Entry Point 0x00490b04
Compilation Time 1992-06-19 22:22:17
Checksum 0x00000000 (Actual: 0x000b1671)
OS Version 1.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 11 libraries
Exports 0 functions
Resources 52 Resources
Sections 8 Sections

Version Information

FileDescription Setup/Uninstall
FileVersion 51.49.0.0
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
CODE 0x00001000 589,108 bytes 589,312 bytes 6.59 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 14845AC96AF400D883C79C670404B4D2
DATA 0x00091000 3,952 bytes 4,096 bytes 4.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5B5B5131230AA2D505134437519C9EED
BSS 0x00092000 5,036 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00094000 9,636 bytes 9,728 bytes 4.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E31473A4F3C3C5E310B54A1695D2DC0A
.tls 0x00097000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00098000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 2576789CCAAFA41177B70528C836B8DF
.reloc 0x00099000 34,060 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x000a2000 80,384 bytes 80,384 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 9AFF204ABE7EF34A0C023EB372259982
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 52 (76,959 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 6 1,848 bytes
2.4%
RT_BITMAP 2 1,488 bytes
1.9%
RT_ICON 4 4,640 bytes
6%
RT_STRING 20 12,256 bytes
15.9%
RT_RCDATA 11 55,051 bytes
71.5%
RT_GROUP_CURSOR 6 120 bytes
0.2%
RT_GROUP_ICON 1 62 bytes
0.1%
RT_VERSION 1 344 bytes
0.4%
RT_MANIFEST 1 1,150 bytes
1.5%

Certificate Chain Analysis

Certificate Information
Description Setup/Uninstall
File Version 51.49.0.0

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware