» unins000.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

unins000.exe

Fixila

The application unins000.exe by Fixila has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is the uninstaller utility registered in the Windows Control Panel for the program DriverXYZ by Fixila. This file is typically installed with the program DriverXYZ by Fixila.

File name:

unins000.exe

Publisher:

Fixila (signed and verified)

Description:

Setup/Uninstall

Version:

51.1052.0.0

MD5:

5db7fde5b14dbc7d8945c5fad142787f

SHA-1:

4e2c061653b88fead7e452d8cf74e15612c5eb82

SHA-256:

76db41c91476b10ccf8f2a9cc28bbdfbdb0da8b57cb3465d911798d064a45eef

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/26/2024 1:35:40 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic.Fixila.Installer.Meta

15.11.15.17

File size:

1.1 MB (1,197,592 bytes)

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\driverxyz\unins000.exe

Digital Signature

Signed by:

Fixila

Authority:

COMODO CA Limited

Valid from:

11/5/2013 7:00:00 PM

Valid to:

11/6/2014 6:59:59 PM

Subject:

CN=Fixila, O=Fixila, STREET="8033 Sunset Blvd #896", L=Los Angeles, S=CA, PostalCode=90046, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E66D84FDF356EE14C2288879BCBD40BC

File PE Metadata

Compilation timestamp:

7/9/2012 9:41:30 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:dYwCLCUplZhgjXj8YcgoniqO3CBiO0jmS+Elzcy8ZNVNx9ZUUE:cGUhni7eSRzcZNYUE

Entry address:

0xFCF94

Entry point:

55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 84, AC, 4F, 00, E8, 95, BF, F0, FF, 6A, EC, A1, C4, 0D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, 28, CE, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, C4, 0D, 50, 00, 53, E8, 7D, D0, F0, FF, 33, C0, 55, 68, 0F, D0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, D0, C7, F0, FF, E8, DF, D9, FF, FF, A1, BC, A8, 4F, 00, 50, 68, 20, A9, 4F, 00, A1, C4, 0D, 50, 00, 8B, 00, E8, 38, EE, F7, FF, E8, 33, DA, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, CC, 76, F0, FF... 
[+]

Entropy:

6.3742

Developed / compiled with:

Microsoft Visual C++

Code size:

1005 KB (1,029,120 bytes)

Program Uninstaller

Program name:

DriverXYZ

Display publisher:

Fixila

Display version:

3.0.1086.15698

Uninstall string:

"C:\Program Files (x86)\DriverXYZ\unins000.exe" /silent

The file unins000.exe has been discovered within the following program.

DriverXYZ by Fixila

www.driverXYZ.com

38% remove it

Remove unins000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.