Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.1.30.1349 1.15%
8.1.10.1300 0.46%
8.1.0.1281 2.76%
8.1.0.1281 0.92%
8.1.0.1281 0.23%
8.1.0.1281 0.23%
8.1.0.1281 0.69%
8.1.0.1281 0.69%
8.1.0.1281 0.23%
8.1.0.1281 0.23%
8.1.0.1252 13.33%
8.1.0.1252 14.94%
8.1.0.1191 0.23%
8.0.10.1464 0.23%
8.0.10.1464 0.46%
8.0.4.1441 2.30%
8.0.4.1441 0.46%
8.0.3.1427 0.69%
8.0.3.1427 2.30%
8.0.3.1427 0.46%
8.0.2.1410 2.99%
8.0.2.1410 0.92%
8.0.2.1410 0.23%
8.0.1.1399 1.38%
8.0.1.1399 0.92%
View more

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetAce, SetSecurityDescriptorGroup, IsValidSid, GetLengthSid, CopySid, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, RegQueryValueExW, RegQueryValueExA, RegOpenKeyExA, RegCloseKey, LookupAccountSidW, ConvertSidToStringSidA, EqualSid, ControlService, DeleteService, CreateServiceA, OpenServiceA, ChangeServiceConfigA, ChangeServiceConfig2A, SetServiceStatus, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerExA, RegQueryInfoKeyA, RegEnumKeyExA, RegCreateKeyExW, OpenProcessToken, OpenThreadToken, GetTokenInformation, LookupAccountNameA, AddAccessAllowedAce, InitializeAcl, RegSetValueExW, AllocateAndInitializeSid, CreateWellKnownSid, SetEntriesInAclA, RegSetKeySecurity, FreeSid, RegDeleteValueA, RegOpenKeyExW, RegDeleteValueW, RegDeleteKeyA, RegSetValueExA, RegCreateKeyExA, ReportEventA, DeregisterEventSource, RegisterEventSourceA, OpenSCManagerA, EnumServicesStatusExA, CloseServiceHandle, GetAclInformation, AddAce, SetSecurityDescriptorDacl, RegQueryInfoKeyW
crypt32.dll
CryptProtectData, CryptUnprotectData, CertFindCertificateInStore, CertGetNameStringA, CertOpenStore, CertFreeCertificateContext, CryptQueryObject, CryptMsgClose, CertCloseStore, CryptMsgGetParam, CertCompareCertificateName
iphlpapi.dll
NotifyAddrChange, GetIpNetTable, GetIpAddrTable, GetPerAdapterInfo, GetAdaptersInfo, GetExtendedTcpTable, GetNetworkParams, CancelIPChangeNotify
kernel32.dll
TlsFree, SetHandleCount, GetACP, VirtualFree, IsValidCodePage, SetStdHandle, GetStringTypeA, GetStringTypeW, HeapCreate, LCMapStringW, LCMapStringA, FindFirstFileW, GetDriveTypeW, ExitProcess, GetOEMCP, UnlockFile, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, FlushFileBuffers, HeapSize, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetFullPathNameA, GetFileInformationByHandle, PeekNamedPipe, InitializeCriticalSectionAndSpinCount, GetFullPathNameW, CreateFileW, LockFile, SetConsoleMode, ReadConsoleInputA, ExitThread, FindFirstFileA, GetDriveTypeA, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, SetConsoleCtrlHandler, GetStartupInfoA, GetCurrentDirectoryA, VirtualQuery, GetSystemInfo, VirtualAlloc, VirtualProtect, GetConsoleMode, GetConsoleCP, SetFilePointer, GetTimeZoneInformation, GetDateFormatA, GetTimeFormatA, GetCPInfo, GetSystemTimeAsFileTime, HeapReAlloc, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, RtlUnwind, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, CreateFileA, ReleaseSemaphore, CreateSemaphoreA, TlsGetValue, DuplicateHandle, TlsSetValue, TlsAlloc, CreateMutexA, SetThreadPriority, ResumeThread, OutputDebugStringA, InterlockedExchange, FlushConsoleInputBuffer, GetVersionExA, GlobalMemoryStatus, GetCurrentProcessId, QueryPerformanceCounter, GetTickCount, GetStdHandle, GetFileType, GetVersion, OpenEventA, ResetEvent, WaitForMultipleObjects, OpenProcess, CreateThread, GetModuleHandleW, GetCurrentThreadId, GetCommandLineA, SetErrorMode, RaiseException, GetSystemDefaultLCID, IsDBCSLeadByte, lstrcmpiA, LoadLibraryExA, FindResourceA, LoadResource, SizeofResource, WideCharToMultiByte, lstrlenW, GetComputerNameA, GlobalAlloc, GlobalFree, LocalAlloc, lstrlenA, GetModuleFileNameA, SetEvent, GetSystemTime, GetCurrentThread, MultiByteToWideChar, GetProcessHeap, HeapAlloc, HeapFree, Sleep, CloseHandle, GetLastError, GetOverlappedResult, WaitForSingleObject, ReadFile, CreateEventA, WriteFile, DeviceIoControl, FormatMessageA, GetModuleHandleA, GetProcAddress, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, InterlockedIncrement, InterlockedDecrement, ReleaseMutex, SetLastError, LocalFree, FreeLibrary, GetCurrentProcess, LoadLibraryA, SetDllDirectoryA, EncodePointer, DecodePointer, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoCreateInstance, CoUninitialize, CoSetProxyBlanket, CoInitializeEx, CoInitializeSecurity, CoTaskMemAlloc, CoTaskMemRealloc, StringFromGUID2, CoResumeClassObjects, CoRevokeClassObject, CoRegisterClassObject, CoSuspendClassObjects, CoRevertToSelf, CoImpersonateClient, CoTaskMemFree, CoAddRefServerProcess, CoReleaseServerProcess
rpcrt4.dll
UuidCreate, UuidToStringA, RpcStringFreeA
setupapi.dll
SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailA, SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsA
shell32.dll
SHGetFolderPathA
statusstrings.dll
GetStatusString
user32.dll
GetProcessWindowStation, GetUserObjectInformationW, PostThreadMessageA, LoadStringA, CharNextW, MessageBoxA, CharUpperA, GetMessageA, TranslateMessage, DispatchMessageA, CharNextA, wsprintfA, UnregisterDeviceNotification, RegisterDeviceNotificationA, GetDesktopWindow
version.dll
GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA
winhttp.dll
WinHttpQueryDataAvailable, WinHttpCloseHandle, WinHttpSetOption, WinHttpDetectAutoProxyConfigUrl, WinHttpGetProxyForUrl, WinHttpSendRequest, WinHttpReceiveResponse, WinHttpQueryHeaders, WinHttpQueryAuthSchemes, WinHttpSetStatusCallback, WinHttpReadData, WinHttpAddRequestHeaders, WinHttpCrackUrl, WinHttpConnect, WinHttpOpenRequest, WinHttpSetCredentials, WinHttpOpen
wintrust.dll
WinVerifyTrust
ws2_32.dll
WSACreateEvent, getnameinfo

UNS.exe

Intel Management and Security Application User Notification Service by Intel Corporation (Signed)

Remove UNS.exe
Version:   7.1.3.1053
MD5:   758c2ce427c343f780a205e28555c98d
SHA1:   e44177d3c6bb21fdaab109184738855417fa4c6c
SHA256:   e3413ba433cd26dd61d3257b08b8354478a049a972efac53c303690bc71dd7e1

What is UNS.exe?

User Notification Service for the Common User Interface is part of Intels Common User Interface for chipsets with integrated graphics controllers which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon.

Overview

uns.exe runs as a service under the name Intel(R) Management and Security Application User Notification Service (UNS) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Intel(R) Management Engine Components published by Intel Corporation, Intel(R) Management Engine Components from Intel Corporation and Intel(R) Management Engine Components by Intel Corporation. The file is digitally signed by Intel Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:uns.exe
Publisher:Intel Corporation
Product name:Intel(R) Management and Security Application User Notification Service
Description:User Notification Service
Typical file path:C:\Program Files\intel\intel(r) management engine components\uns\uns.exe
File version:7.1.3.1053
Size:2.53 MB (2,656,280 bytes)
Certificate
Issued to:Intel Corporation
Authority (CA):VeriSign
Expiration date:Saturday, April 23, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Intel Corporation
10% remove
This program provides the Intel Management Engine Components Driver for supported notebooks with supported operating systems. The Intel management Components monitor the installed Intel hardware, such as chip sets, storage, and other components. They will notify you if there are problems, updated drivers, and other information about those components. These components installed by the computer manufacturer automatically during the OS in...
ValuSoft
11% remove
is a budget PC video game published and distributed by ValuSoft Cosmi.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'UNS' (Intel(R) Management and Security Application User Notification Service)
  • UNS

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00826478%
0.028634%
Kernel CPU:0.00344734%
0.013761%
User CPU:0.00481744%
0.014873%
Kernel CPU time:78 ms/min
100,923,805ms/min
CPU cycles:1,094,738/sec
17,470,203/sec
Memory
Private memory:3.21 MB
21.59 MB
Private (maximum):7.3 MB
Private (minimum):7.2 MB
Non-paged memory:3.21 MB
21.59 MB
Virtual memory:70.99 MB
140.96 MB
Virtual memory (peak):74.74 MB
169.69 MB
Working set:7.26 MB
18.61 MB
Working set (peak):7.3 MB
37.95 MB
Page faults:28,724/min
2,039/min
I/O
I/O read transfer:2.47 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:28 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:243 Bytes/sec
448.09 KB/min
I/O other operations:91/sec
1,671/min
Resource allocations
Threads:14
12
Handles:162
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\intel\intel(r) management engine components\uns\uns.exe"
Owner:SYSTEM
Windows Service
Service name:UNS
Display name:Intel(R) Management and Security Application User Notification Service
Description:“Intel(R) Management and Security Application User Notification Service - Updates the Windows Event Log with notifications of pre defined events received from the local Intel(R) Management and Security Application Device.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 32.00%
Windows 7 Ultimate 16.00%
Windows 8 14.50%
Windows 8.1 12.00%
Windows 8 Single Language 6.50%
Windows 7 Home Basic 5.00%
Windows 7 Professional 5.00%
Windows 8 Pro 2.50%
Windows 8.1 Single Language 1.50%
Microsoft Windows XP 1.50%
Windows 8.1 Pro 0.50%
Windows Vista Home Premium 0.50%
Windows 8.1 Pro with Media Center 0.50%
Windows 8 Enterprise 0.50%
Windows 7 Enterprise 0.50%
Windows 8 Pro with Media Center 0.50%
Windows 8.1 Pro Preview with Media Center 0.50%

Distribution by countryDistribution by country

United States installs about 35.50% of Intel(R) Management and Security Application User Notification Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 20.00%
Dell 16.55%
Lenovo 13.10%
Sony 11.72%
Acer 11.03%
Hewlett-Packard 10.34%
Toshiba 8.28%
Samsung 2.41%
GIGABYTE 1.38%
Intel 1.38%
NEC 1.38%
Alienware 1.03%
Apple 0.69%
MSI 0.69%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE