home

uninstall_pcspeedup.exe

PcSpeedUp

The application uninstall_pcspeedup.exe has been detected as a potentially unwanted program by 5 anti-malware scanners. The program is a setup application that uses the Nullsoft Install System installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from dl.downloadahsaequouzet.com.
Product:
PcSpeedUp

Version:
1.3.5.0

MD5:
6bc49363b61a71629729a7d7f17c5d20

SHA-1:
6b713f5190a7e04485d3725933c72f398d5d5398

SHA-256:
666c9cfde336065cea46b545c2df9f75b48440af0c98597106503b298feed51a

Scanner detections:
5 / 68

Status:
Potentially unwanted

Explanation:
This is part of the Crossrider Internet browser extension framework which may modify the user's web browser settings including changing the home and search pages.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application.

Analysis date:
4/25/2024 12:12:06 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Adware-gen [Adw]
2014.9-140920

Bkav FE
HW32.CDB
1.3.0.4959

Dr.Web
Adware.Downware.7829
9.0.1.0220

McAfee
Artemis!6BC49363B61A
5600.7045

Trend Micro House Call
Suspicious_GEN.F47V0813
7.2.220

File size:
161.5 KB (165,356 bytes)

Copyright:
AppInstaller 2014 (142121616)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

File PE Metadata
Compilation timestamp:
12/8/2011 3:34:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
3072:LbAvO4TKWY63JFC4RhEj1NIoWSTMX+2BeGLTHn10iXuxPrs2t:IvhKsO4yN9BMu2IGTBu1Tt

Entry address:
0x3E0F

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, B4, 52, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, 58, 4F, 00, 00, 53, C7, 04, 24, 00, 00, 00, 00, E8, C3, 52, 00, 00, 51, A3, 40, 5B, 42, 00, C7, 04, 24, 08, 00, 00, 00, E8, 3F, 32, 00, 00, A3, F0, 5B, 42, 00, 8D, 85, 84, FE, FF, FF, 52, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 4C, B2, 40, 00, E8, ED, 51, 00, 00, 83, EC, 14, C7, 44, 24, 04, 4D, B2, 40, 00, C7, 04, 24, 20, 5C...
 
[+]

Code size:
32.5 KB (33,280 bytes)

The file uninstall_pcspeedup.exe has been seen being distributed by the following URL.

http://dl.downloadahsaequouzet.com/u/.../Uninstall_PCSpeedUp.exe

Remove uninstall_pcspeedup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.