» sfpclauncher.exe
Overview
Analysis
File Details
Behaviors (1)

sfpclauncher.exe

Smart Fast PC

Smart PC Solutions, Inc.

The application sfpclauncher.exe, “Fix, clean, optimize your PC!” by Smart PC Solutions has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Smart Fast PC’.

File name:

sfpclauncher.exe

Publisher:

Smart PC Solutions (signed by Smart PC Solutions, Inc.)

Product:

Smart Fast PC

Description:

Fix, clean, optimize your PC!

Version:

3.0.0.0

MD5:

ba1fd6e47b0d90c8e481d3ca046a30fa

SHA-1:

dc0b7e5be804bbb2570b9b1b714aead2c88b0305

SHA-256:

28ae3810ba4784359be9a94dcc2defcf39ddcce65364b77257b6ea8c8c1c0e5a

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/26/2024 2:25:15 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.PC Utilities.SmartPCSolutions (M)

16.2.14.1

File size:

80.4 KB (82,304 bytes)

Product version:

3.0.0.0

Smart PC Solutions

Trademarks:

Smart PC Solutions

Original file name:

SmartFastPC

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\smart pc solutions\smart fast pc\sfpclauncher.exe

Digital Signature

Signed by:

Smart PC Solutions, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/5/2011 2:00:00 AM

Valid to:

5/30/2014 2:59:59 AM

Subject:

CN="Smart PC Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Smart PC Solutions, Inc.", L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

502E76B6ACDCDE4F3336BF9286946063

File PE Metadata

Compilation timestamp:

6/20/1992 1:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

1536:WSm3FK158Ps6tGoorG7pj9kgdE4rtKcai6QQTvdoYUFiVLo4/LOaxtrTEFm:9m18+/QooKhJdE1n5QQTlvpPjOGNEE

Entry address:

0x25470

Entry point:

60, BE, 00, C0, 41, 00, 8D, BE, 00, 50, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75... 
[+]

Entropy:

7.2195

Packer / compiler:

UPX 2.90LZMA

Code size:

40 KB (40,960 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Smart Fast PC

Command:

C:\Program Files\smart pc solutions\smart fast pc\sfpclauncher.exe

Remove sfpclauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.