» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

Fiorentino Media Inc.

The application unins000.exe by Fiorentino Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program Activeris AntiMalware by Activeris. This file is typically installed with the program Activeris AntiMalware by Activeris Software LLC which is a potentially unwanted software program.

File name:

unins000.exe

Publisher:

Fiorentino Media Inc. (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

dae993850956ff79aea325dd0509bef9

SHA-1:

10108e42bdc9c09c9f4f8f628196e36d3d278a72

SHA-256:

52e428f5758ed67db99538b204ec89c05f72cc6e435c1d0a6af50276ad5d2ff2

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/16/2024 6:34:15 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Installer.FiorentinoMedia.I

14.2.25.4

File size:

1.1 MB (1,172,576 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\activeris antimalware\unins000.exe

Digital Signature

Signed by:

Fiorentino Media Inc.

Authority:

COMODO CA Limited

Valid from:

1/25/2012 12:00:00 AM

Valid to:

1/24/2013 11:59:59 PM

Subject:

CN=Fiorentino Media Inc., O=Fiorentino Media Inc., STREET=7904 E. Chaparral Road, STREET=STE A110-430, L=Scottsdale, S=AZ, PostalCode=85250, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

009CB8D8E313806C1914ADA02E4DB86602

File PE Metadata

Compilation timestamp:

12/20/2011 2:16:51 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:wh+EpSGP3ZEgRhuRKOODzjJBwjOGfcCUWgEf0ZsMCmGyHx9g7:Ca+PjJaEWZAsT2O

Entry address:

0xFAF7C

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, A4, 94, 4F, 00, E8, AD, DF, F0, FF, 6A, EC, A1, 7C, ED, 4F, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 40, EE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, 7C, ED, 4F, 00, 53, E8, 95, F0, F0, FF, 33, C0, 55, 68, F7, AF, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, E8, E7, F0, FF, E8, 17, E2, FF, FF, A1, DC, 90, 4F, 00, 50, 68, 40, 91, 4F, 00, A1, 7C, ED, 4F, 00, 8B, 00, E8, 50, 0E, F8, FF, E8, 6B, E2, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, E4, 96, F0, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

999 KB (1,022,976 bytes)

Program Uninstaller

Program name:

Activeris AntiMalware

Display publisher:

Activeris

Display version:

1.0.0.1

Uninstall string:

"C:\Program Files (x86)\Activeris AntiMalware\unins000.exe"

The file unins000.exe has been discovered within the following program.

Activeris AntiMalware by Activeris Software LLC

Activeris AntiMalware is bundled with the FastAgain PC Booster program. In addition it is bundled through third party download managers such as AirInstaller which distributes ad-supported web browser toolbars.

www.activeris.com

73% remove it

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.