home

pcspeedmaximizer_pih.exe

PC Speed Maximizer

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.
Publisher:
Avanquest Software   (signed by AVANQUEST SOFTWARE)

Product:
PC Speed Maximizer

Version:
4.0

MD5:
522c15b861bf655d9757e2f8e0b2b526

SHA-1:
7cd0baf0ce1baf99ca21cd861aa1388b537820f3

SHA-256:
8148f3e92373e3ec12d3b7ff03772ab2ec13bbce710f3594416e5ffa00b78997

Scanner detections:
5 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
4/26/2024 1:28:45 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Unwanted
7.1.1

Comodo Security
ApplicUnwnt
20815

Dr.Web
Program.Unwanted.54
9.0.1.027

ESET NOD32
Win32/AdWare.SpeedingUpMyPC (variant)
9.11062

G Data
Win32.Application.PCSpeedMax
15.1.24

File size:
1.8 MB (1,883,584 bytes)

Product version:
4.0

Copyright:
Avanquest Software

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pcspeedmaximizer_pih.exe

Digital Signature
Signed by:
AVANQUEST SOFTWARE

Authority:
VeriSign, Inc.

Valid from:
2/7/2012 1:00:00 AM

Valid to:
2/1/2015 12:59:59 AM

Subject:
CN=AVANQUEST SOFTWARE, OU=Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=AVANQUEST SOFTWARE, L=Paris, S=Paris, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
79CC3E5A3DB621E78898C3B669104F68

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:M2NjTYWdO9wx1dVMMOQ0Tv+0McWKWZJUhktv:hNjTVdOWvdF0S0McW/ZOq

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9932

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file pcspeedmaximizer_pih.exe has been seen being distributed by the following 8 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_RTB_MRM_PCSM&keyword=&campaignID=PLY&mrmid=eGsilAcUbYUQSSatj5A0y6GCFf5iF9Ix55epIFE-3tNtAXn2HEX7J4tLdTOs8Px-YSCYarIzpBg1oSsjboLLjEE0asC7aVXCkJV3Z1MC5TDXQjfdg9IraPJJlSbUSLsA3XoecDkhAZqXAvI-KiWUYFqf67WAb5YXiSn56tcrqDMVN4D6lhoe0aPlmMhcbz7SP0pAQ6YOhMtZqRp27NbbtZNVS3683PZR9o-VvWpbYwzHULfpmUx5afIG8hJe8K6ez3WgGYgceMSw6lKZdwhHcMPLcxwGN4xq-XLzG7GSrzF4lnuMFT2YRytypstobH1b6abE4xBe85Lbq5e06RO6gdamu9uLWDUo3vSI3BbR-hfSAxT1BYsw3OLhD17K-nCLnxiQ51k0tf86Dw6C03KNCeY4D4eYnlE3Po_8OS4WOKCXVOFC&mtmid=&clickid=&filter=adc48561152&go=http://filecdn2.avanquest.com/ppc/PCSpeedMaximizer/.../PCSpeedMaximizer_PIH.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_MRM_PCSM&keyword=&campaignID=PLY&mrmid=Zj5JjAx5rM0ednXj5R8EO-jsGZ_nbWAlpWkgVGHZkDyDpXtmvKPxCbEtpuhPXo37Zdbp7BawyzE0RpSddH1QIng4TiOtG61N3QGF3hnOruhyZCzBkKOCjSIYKQxu1gPXoDCxzuXBWjG1Pn0g4llsnxu0OVxNhNHCLXsyxkVTXJEOLXGLqsEunY_F8Ko5R19rF73kBshCEVdWpLcf7NBuaxUBWdOvi2P_zC7YfOtBc3jsNIOclq3WgNNE8hTOzCXTv6KRA1k638A2LIvsWWpzsB00Bn_sQFDH8rz6qT6oIQ8a7LTlatc8GWmolVBCJv_wnBHHwiCmoO4TUynY-iFOfC7Nr3F82NE_qO7N2IY8GgxIwujazvwDDDccTJpOBXdO2tLqV3rKqTXyU-6qmXGAjWDzQI5V_yd0J9jGBlbs_qmoyM8xIRY1G_rQXytKwXA-xNLGkUjacxbjcmyHzgCjcCBULL5bVg&clickid=&filter=lp240921455&go=http://filecdn2.avanquest.com/Utilities/PCSpeedMaximizer/.../PCSpeedMaximizer.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_RTB_AFD_PCSM&keyword=&campaignID=AFD&mrmid=&mtmid=&clickid=AA06MKPaf4NYdDiOSkuUgafkk1ndawFAaAAAAAAA&filter=15063&go=http://filecdn2.avanquest.com/ppc/PCSpeedMaximizer/.../PCSpeedMaximizer_PIH.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_MRM_PCSM&keyword=&campaignID=PLYS&mrmid=IJ-RFwUr1_ehJVxopNVFvQJ5XkgNI0Bf4k6JtNPN-zQYAl7nriG3EXkKoUCQQg6ZQ4BChu_K7x6MznqWbhdbAjs3s9M5swsUFX9Fww-Q96hc3viysWZWwV82H75yvpActBQl7cLn2eOgfVdqjunEdLB2MYYdLGJBCYYc0UzAcMYMa9Pcw2wwFha8IRgbFYDcYFpc6I2q1oo4JSsMOpEKs-bV--RkMUBtfPbaZNkZTwOgH6zfb7mNU23j6XLRCRszregGeJY9qud_jTo3WJxRR6BPcqDt-PhJsmbxTHq6VZDII26n8QHiKhFS26W5MA-bE2MHDX2r0gbtg2bkGdpl5pKVWAfKW8xX1zsH_Qp4OggQ2OmA4vpe06Z4KuavaKpggsg_v38Byd32w5ornLQ_wcvBFbhI8Kgy37zEH9gzFbybfD4sZ0aT9LuG8DLgdFURMMTtUSjdVtvzCjjO3g&clickid=&filter=36151202&go=http://filecdn2.avanquest.com/Utilities/PCSpeedMaximizer/.../PCSpeedMaximizer.exe

http://software.avanquest.com/HP?b=zmbgZ7vTcYuaf4wNkm2l5pnjOw0sUlt856yqfY4OmMgDv5ZRUCJWaUYkM2RdU-kj&c=P-LoDqARt7cFu2zfzfup3Q

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_MAV_PCSM&keyword=&campaignID=MAVS&mrmid=&mtmid=&clickid=h2vm-aGZJSm9U8Snr0bZuI2atQd4iHMVtG17bn3adk8GXoWQOseG2HCNmh8P5Hh02-0e1NaoddqBW3eM-QeCEviSNJEoRzFdSHoUtgB8aW4Mdd4-AX5uhFD7xRoOhkgRPyYM3R2x3PdYpG9d-nxw5-ElDNWpBXfIxwy14FTVJhuoQmJMrWczcRKnZXy00yP4r-kXzisshmsL5BNc5h_YpQXutRk5u-VFfDI83vl73MIasMANCYoWbffUZrCGcreINNWi7grAjZJtdoVFOYoIPU4TFpK3isos56WKHU1H-POt8OHLtgBbxvG_ehF_OBW3t1xMv9a42wJ_RkInezxCWlquRii7W-2nXoBXsAxIlEcj6VP6P0NpV-giTQusaL6nrzsBvy3xPmGT-XDFuL1D8XGEzk62FrvTocpAqPVgjw1sjQ2VnSamVEdYG44cq82nuEIg2TsIEBld8wpq2g&filter=&go=http://filecdn2.avanquest.com/ppc/PCSpeedMaximizer/.../PCSpeedMaximizer_PIH.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_RTB_AFD_PCSM&keyword=&campaignID=AFD&mrmid=&mtmid=&clickid=AA06MK1VNoSrVes1DEWo3BlKrW9hs YM5QAAAAAA&filter=10839&go=http://filecdn2.avanquest.com/ppc/PCSpeedMaximizer/.../PCSpeedMaximizer_PIH.exe

http://filecdn2.avanquest.com/ppc/PCSpeedMaximizer/.../PCSpeedMaximizer_PIH.exe

Scan pcspeedmaximizer_pih.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.