» PCFix.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

PCFix.exe

PC Fix 2011 | Registry Cleaner

Dubai Click LLC

The application PCFix.exe by Dubai Click has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PCFix’. This file is typically installed with the program PCFix by Dubai Click LLC which is a potentially unwanted software program.

File name:

PCFix.exe

Publisher:

Dubai Click LLC (signed and verified)

Product:

PC Fix 2011 | Registry Cleaner

Version:

3.0.6

MD5:

ca9e33f5ceb25633b0f83bf65e81047e

SHA-1:

5c5f87213c8e7637e058f5fd4a5418ba37f2bcb5

SHA-256:

c227bf1f1dc15c9daad2a3a2b4a360a6154e90efc5ba5be0a015db074cd65a90

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 11:27:33 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.DubaiClick.PCFix.Meta (L)

16.3.27.17

File size:

6.5 MB (6,795,504 bytes)

Product version:

3.0.6

Original file name:

PCFix.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pcfix\pcfix.exe

Digital Signature

Signed by:

Dubai Click LLC

Authority:

The USERTRUST Network

Valid from:

5/9/2011 2:00:00 AM

Valid to:

5/9/2014 1:59:59 AM

Subject:

CN=Dubai Click LLC, O=Dubai Click LLC, POBox=40735, STREET=Dubai Internet City Building 4/C1, L=Dubai, S=Dubai, PostalCode=Dubai, C=AE

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

0AC64EC09D4B432D0BB970E9F00D1947

File PE Metadata

Compilation timestamp:

6/13/2011 2:10:38 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:lp/m58SZ1w85dnqU3IvIV0fN4H7hHU9cnGlthQMceSjNVFwPjt1qYuOpJz8XXYu:bSZ1jnqeIv+04Gt3chjFcjWYZHCXf

Entry address:

0x5E3D3

Entry point:

E8, 03, 7E, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, 4F, 28, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, A6, 0C, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, 2A, 28, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, 41, 7E, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 51, C7, 01, 7C, 7D, 48, 00, E8, 91, 81, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01... 
[+]

Code size:

520 KB (532,480 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

PCFix

Command:

C:\Program Files\pcfix\pcfix.exe

The file PCFix.exe has been discovered within the following program.

PCFix by Dubai Click LLC

Publisher's description - “PC FIX Cleaner Registry Cleaner is the next generation software for Windows registry maintenance.”

www.dubai-click.com/products.html

68% remove it

Remove PCFix.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.