home

extensionmanager.dll

Extensio Dynamic Link Library

SpeedyPC Software

This is a part of the SpeedyPC Pro software from ParetoLogic Inc (sometimes bundled through 3rd-party installers). The module extensionmanager.dll by SpeedyPC Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program SpeedyPC Pro by SpeedyPC Software which is a potentially unwanted software program.
Publisher:
SpeedyPC Software  (signed and verified)

Product:
Extensio Dynamic Link Library

Version:
1, 2, 0, 0

MD5:
87914af1bb2966187873d0894b43db6f

SHA-1:
a71df7273841b0ff3ad2c633c07f14c0ac680097

SHA-256:
9757bb4caddabfe7861c55bd4bedb41c90a3afce6a3aaf136492cbfc6c2d515d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 12:06:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.5.29.4

File size:
81.6 KB (83,560 bytes)

Product version:
1, 2, 0, 0

Copyright:
Copyright (C) 2007

Original file name:
Extensio.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\speedypc software\speedypc\extensionmanager.dll

Digital Signature
Signed by:
SpeedyPC Software

Authority:
GlobalSign nv-sa

Valid from:
10/4/2012 2:45:05 PM

Valid to:
10/5/2013 2:45:05 PM

Subject:
E=itgroup@paretologic.com, CN=SpeedyPC Software, OU=Paretologic Inc., O=SpeedyPC Software, L=Victoria, S=British Columbia, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B885D7A3AB531E0BACD5D2AD1CBA6BEA

File PE Metadata
Compilation timestamp:
9/28/2012 12:42:00 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:CmZlNFtFk/PSW4LHqaJlediaXfkoITMpGYD/i2zKp5JLqRY:CmZ5rlRJZ8dITMctgKp5JLqC

Entry address:
0x450B

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 7E, 2E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 85, F6, 74, 07, 8B, 7D, 0C, 85, FF, 75, 15, E8, 2B, 18, 00, 00, 6A, 16, 5E, 89, 30, E8, CF, 17, 00, 00, 8B, C6, 5F, 5E, 5D, C3, 8B, 45, 10, 85, C0, 75, 05, 66, 89, 06, EB, DF, 8B, D6, 2B, D0, 0F, B7, 08, 66, 89, 0C, 02, 83, C0, 02, 66, 85, C9, 74, 03, 4F, 75, EE, 33, C0, 85, FF, 75, D4, 66, 89, 06, E8, EB, 17, 00, 00, 6A, 22, 59...
 
[+]

Entropy:
6.2898

Code size:
49.5 KB (50,688 bytes)

The file extensionmanager.dll has been discovered within the following program.

SpeedyPC Pro  by SpeedyPC Software
SpeedyPC Pro is registry cleaner utility whose purported purpose is to remove redundant items from the Windows registry. SpeedyPC Pro automates the process of looking for invalid entries, missing file references or broken links within the registry and resolving or removing them.
www.speedypc.com
81% remove it
 
Powered by Should I Remove It?

Remove extensionmanager.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.