» pcbooster.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

pcbooster.exe

FASTAGAIN PC BOOSTER

Fiorentino Media Inc.

The application pcbooster.exe by Fiorentino Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program FastAgain PC Booster by Activeris Software LLC which is a potentially unwanted software program.

File name:

pcbooster.exe

Publisher:

Activeris (signed by Fiorentino Media Inc.)

Product:

FASTAGAIN PC BOOSTER

Version:

1.0.1.2907

MD5:

6accfc315ff55c983934811451ddee66

SHA-1:

5270625dad746e628fd567e35e4ea0c3c0262d88

SHA-256:

19675ad472dffb9ab366f78686d55f5537c3a47d537b92403e565436dab2234f

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 10:56:10 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.11.20.0

File size:

7.7 MB (8,034,816 bytes)

Product version:

1.0.1.2907

Trademarks:

FASTAGAIN PC BOOSTER

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fastagain pc booster\pcbooster.exe

Digital Signature

Signed by:

Fiorentino Media Inc.

Authority:

COMODO CA Limited

Valid from:

5/6/2014 3:00:00 AM

Valid to:

5/7/2015 2:59:59 AM

Subject:

CN=Fiorentino Media Inc., O=Fiorentino Media Inc., STREET=7904 E. Chaparral Rd., STREET=Suite A110-430, L=Scottsdale, S=AZ, PostalCode=85250, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

2ED7E7EDFE8B4E9DFDB098348550E6B0

File PE Metadata

Compilation timestamp:

5/8/2014 10:01:44 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:q/iG7Tn/rUYrU1tNfiFBTnm1sywPBR+4D0qW1JzkdXrUqRJzRCYvGOLhU9QF1qn3:q/F7TDw1tIFtzohQ9CYuc4NORU

Entry address:

0xB5D83

Entry point:

E8, DC, 89, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 50, C7, 57, 00, 75, 02, F3, C3, E9, 5E, 8A, 00, 00, 8B, FF, 51, C7, 01, 94, 20, 52, 00, E8, 56, 8B, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 79, EE, FD, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 8E, 8B, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 14, 75, 20, E8, EF, 45, 00, 00, 53... 
[+]

Code size:

1.1 MB (1,158,144 bytes)

Scheduled Task

Task name:

FastAgain PC Booster

Trigger:

Logon (Runs on logon)

The file pcbooster.exe has been discovered within the following program.

FastAgain PC Booster by Activeris Software LLC

Caution should be taken when performing any sort of registry cleaning. In addition with today's modern Windows operating systems, the effects of any sort of registry cleaning is negligible.

www.activeris.com

62% remove it

Remove pcbooster.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.