home

unins001.exe

SHOPMANIA NET SRL

The application unins001.exe by SHOPMANIA NET SRL has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
SHOPMANIA NET SRL  (signed and verified)

Description:
Setup/Uninstall

Version:
51.52.0.0

MD5:
d3e57a0c84c68c02da63a1fa0b580171

SHA-1:
1060f7aa6981b3d45e036b867f914f12bb8661ae

SHA-256:
4f199c9aedef69d8d3ecccb14fbc01be9c11500915fff3bafab9a0460a1b94d1

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/17/2024 4:46:44 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SHOPMANIANET.Installer (M)
16.2.27.18

File size:
1 MB (1,081,928 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\dealicious\unins001.exe

Digital Signature
Signed by:
SHOPMANIA NET SRL

Authority:
StartCom Ltd.

Valid from:
7/1/2014 6:23:11 PM

Valid to:
7/1/2016 7:54:56 AM

Subject:
E=support@shopmania.net, CN=SHOPMANIA NET SRL, O=SHOPMANIA NET SRL, L=Ploiesti, S=Prahova, C=RO, Description=x37nwEzejddu0mzf

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0F17

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hPcYn5c/rPx37/zHBA6pFpCZ1CEuD3of4mx9/M:R9urPx37/zHBA6pKaTofrG

Entry address:
0x98CFC

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, 57, E8, 3A, A6, F6, FF, E8, 91, C9, F6, FF, E8, 08, D6, F6, FF, E8, AB, D6, F6, FF, E8, 2E, 0C, F7, FF, E8, 41, 7A, F7, FF, E8, A4, 7C, F7, FF, E8, FB, 9B, F7, FF, E8, 0E, 03, F8, FF, E8, 09, C2, F8, FF, E8, CC, 69, F9, FF, E8, B3, 7C, F9, FF, E8, FE, 69, FB, FF, E8, C5, 6E, FB, FF, E8, C4, 76, FB, FF, E8, A3, 8A, FB, FF, E8, 96, A4, FB, FF, E8, 55, E3, FB, FF, E8, 54, F2, FB, FF, E8, 67, 05, FC, FF, E8, 86, B8, FC, FF, E8, D5, 40, FD, FF, E8, FC, FF, FD, FF, E8, 5F, B3, FE...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
608 KB (622,592 bytes)

Remove unins001.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.