home

ws1911c2c0.dat

PC Speedup Pro

PC Speedup Pro

The file ws1911c2c0.dat by PC Speedup Pro has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from www.pcspeeduppro.com and multiple other hosts.
Publisher:
PCSpeedupPro.com   (signed by PC Speedup Pro)

Product:
PC Speedup Pro

Version:
PC Speedup Pro

MD5:
66580b0fb23d7ca8c31c5388cb847137

SHA-1:
611eef1289bdb1005aef80060fb55e8bda7af828

SHA-256:
821af49a284ef6568e12fc1de9d300ae27fc1547a74e558583fbc0249e590df8

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/2/2024 12:36:19 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.PCSeepdupPro.PCSpeedu.Installer.Meta (L)
16.7.7.22

File size:
4.5 MB (4,729,984 bytes)

Product version:
1.0.0.3757

Digital Signature
Signed by:
PC Speedup Pro

Authority:
COMODO CA Limited

Valid from:
8/19/2015 3:00:00 AM

Valid to:
8/19/2016 2:59:59 AM

Subject:
CN=PC Speedup Pro, OU=PC Speedup Pro, O=PC Speedup Pro, STREET="104,SURIYA NAGAR MURLIPURA", L=Jaipur, S=Rajasthan, PostalCode=302039, C=IN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C5061427713FFD711E8F8302D7B03953

File PE Metadata
Compilation timestamp:
7/9/2014 10:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:Z6sfgV2bEKnHVYMAHat6cgrUnXrji6zypdlfRWAzNgU1eFBRoO8+:ZZfgVqEKn1YH6BgrUnXa6kdLfNgU1YXT

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file ws1911c2c0.dat has been seen being distributed by the following 8 URLs.

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_47551114&x-context=adk2_1Zv4uJ8mPKgRMKibxENxWKyneQSJevE2P_XlmzJFXqKGylbr8QkUryJ-ZC2UXd93Hl5S98Nd0dHYz4Sw0d89j_Nq9An_177kiFKYH1EnuyCneI3oyhO67WdgEbwVcTI6JMqmJ_EuJtwAQMDS2-NZ3tZF3u5Cd-_s0ukBYAK0orvkLzK6oT2OMbYrx65z9QBscE2tUHnf1sWxujL4MUPfBBUkx6q0gYLL8MjjHLwnDtFFl4eeUNZdPOtszn0FzX4D1DzGvEuqyzd1BYGJEdbRzlbQq6U3PIibtVAdoG87trE-Yg5q9qBKDCDX_qiEQO-vt5iK1s2KRReIgC68SrbT3UDJbz9eBrhS3TfqPZHmZl5HQwTJASCxtwbrjliKHlxJSHnJeiHhBbl5X83Qlem2e1b7JpyDZ_YR7XMCj_-faHGCTIABpEeAJD11VH8&x-at=PopUP

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_47551114&x-context=adk2_smy26707gizAIDZxCvkcH28_yeOGY_akrQ9I0J80ft7YoavJkDa7-tifqURRwVqn13vKQCmZqC9bZ3XvwGymtiuvQ9M8g8A0nGFLeFZnI9Btp42A3FzQdF3Fi70-ny9Tl7xVnipslw0Tp9ba72lND78FTNAwML5fIE7gAIywEisEoKRWPRrpVwX968iYL_AUUp7K6UK18fH4MdNzr5sHT_rQj6w2ahKP-uL-zh-l1p3I6AknyYHgJas1Ghj6uXfcWcCdBnI6JLzRM77ER210rbreEeCUKsy7n6z1eICgpPsKnofem2-ygBOhWH1rlPsdyC99GNiW1jf_40-4uhbm8SmHBkPqqN_-roJD-2jMVTugKHxT1zI8YfowqrVhX8ES9eks4ybSl2JYCkcKAaf0DVcBZRfc-OB-EOq_q4w18Jlv655htzjJlodTH4tmefY&x-at=PopUP

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_70310993&x-context=adk2_u7DinY6SsYUK0kGv2U5VspBIU6GWdCTualSFBpigvhjV6ww-hI76KQFG6ksw2tBjUevKnfJUl_ddO2ZOP9OBj0OaLoSn80o-RsIot0gT0LhqltBoOThPPIqM-H7TNfEr42QprvKi-dAlujkzhVlE7H719-GCgFZCtweSFCrUdwxEt32IdLixqPCw0xAoqMz4EJFHMfepe00NF0afg8jPXRT7lyoP3bLATVZ5MxkHKgSA_iCpNEoMx_EAQedsqyOr-0gIAY67yGpI4gUr9TV9GPTeuRaqEVmuHyMedKL8d3jpUqxU1NyVas_c19ekt5UuCXnNIPzD4Z7DqH-ZjVFBj-5jAn1fCj-aZFqbcM1LVXSiWqAjZsGDt0zDPB-xu7BPmmvuz-Qcw8mBK5Bcdj32S5GxR-yzZA8tEUDgVFZAsRTHCg0BYzAKwUw3D5F8iw&x-at=PopUP

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_38491251&x-context=adk2_j1V5sJoJwSBVlPvYlCUSVqRIMH3pjDyosw1IcIW-hsl91LoZucYWFXGvQlr4gGzdXAIJSeA39pS9PKoN_qQaTojOZKnkpANCVYtzZHm6Pc4O1TiMPJwDiWKIKhA0hSH-KanoSlA_fDeqWgU5cjVraG7NVty44d7kPpPfv_L0MCwr9ZOEof82G5LqSSidnS23sqTJn_KZ9aMLZgPLoRCkZ7CiK3m8rJ_YozUUPMfaoRzMZ9w8Dp07Xul7SCNNRe19iS8pvh9A_wPJIHYIxnvKTkdFKEDGWd3DKb_Vc2zSMBgcNOb0TDEBM3juuJVkZdcQwDyomKw_Lw2vskqD_5gB4n3ceNL88I9nd0i_-s_YQN7OIAPosZayVvNeEY9CVoH6_ClL0d4xk_NkGAxvb5pS9sDywyZP83j6Qw5RHMu2v5g6Ny1ajan0xODcKKXQCQ5gCWM&x-at=PopUP

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_70511190&x-context=adkm_l9gXRX0n9syo6QXSqnV72IMGHcn9bWdkTclFHAvkOJOns95t17-_jBMj3Vx98H7H5snB3oHg-MBCIrFNfVYRxIJg9E1N58SXVc28mMVKSsZ_uWPZzVLvjuv0zuqhYMfIxCFZRBxg-XbjeNHGW33cAXozM8phB9ZpeAilSUx3H2q5UkUOP8psV1vVUs_k6yJjKpOtJHIewDsU7ulNOmZmLScGcQdXFolYH2Ojj21CuHbRk38zLHWB0v8bMTJqcsRKjsIhEo1zG-4hEFCxEfD0MAhAWe3oCJeVzxsLPTFeRvMB4ce3aZiSRvKE55fCyT8EMjvqOXWNp-afIglxqLEbpGyfTt49K5IK2is4KfCaMiwbJlwBIz-BpLkAYG68LEoL7gqo0aWQK9hYDyzB5iDaRpVotthlp0UDmbg_uIIf1bhaOIBT7d0ci20npOcTJ4wqgzjQWLEPqKlBLaAlnvvXT9Em&x-at={E}

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_37423330&x-context=adk2_53Ab5QmZPfoIhR6ngio8Hc8E0jcvRzyAHkIunRlg9QmQGnG3U3rG9TJh2yKmcsTlPxmwtpOATd1mae1bqybA8qHMTLP9s1XiIBC8Qjo8YdsXy4JZmdJlhSNJi5iFVahOqsJirGDxXuWG5yDH7mnWi35EM90nkqAeebx-u3ROs4nbyaNoUX82MJ49wtQgpNxyJaf6x1nJfeCUU1w0sMZAF-9xQjAJWgeP8Qoq2d65hQ8Hpf85m2JDQnGmmTl4-6NGlsJ7JPm5P6roZnr_ux0E-xkGgP-X_lR2XUlnow2t2FoOvzcSpEx3upphFmDT1DYGl6e6eELTB2Lu5rSXsv6_3TFW3J9MAfvZJtqPnYMc8HrTJOdVuMRZoefFoeOIYa8tTAsF7sIoRykvUc0cjiOdeE5o48HORLHEs3jMupc8_fVXeBDqIDjpx32PRiO2M-sGBDA9P-A5F-PEN-Rv8NS4pjasKLs&x-at=PopUP

http://www.pcspeeduppro.com/download_ip_mr_new.asp?utm_source=mrg&utm_campaign=mrg&utm_pubid=mr_70277688&x-context=adk2_Q3dqLPj1bzoBbJCPH-F3uEFj5zeJ5TlEdFNX954nmU_U2EAXLWHwtG63Y6TJANWk6Z5vLlcQ3SpxaLlk6YRsOYa-BmvujnrgUMF_fMJ1CZDW1YPWv7FqMv04nibCWDuH6sjVQZ8Py0D-40Fi3MvtQZPIh6V1i01ynzrYOtKj-AFCrIrs1bRBfH9TRwaMl3BwcNXoccSEd4RNBJxK-dZOv5OpnTiuXjEolQYH-WkROL5ZhXWyVgVP3Q7OCnWBNIYbyGjSQI8yU3HU8kWRaoV7H39e5n4k-7YHU1oAbyJkfVL0KbVOxbRtQxr0AnmZqckmT1QiSdqbRgqg1Sq5SJz63v6i76sFlwnqiUORC0CsI3fH8ht7qvzilJ4xmhcKJOQD4SegrkWrpl6a4LdLJHaGDqvJVg3J7jPthII9bP9TgzxBPhFvecpzk8B7_N5d-plV195IEqSe9HE0C75u&x-at={E}

http://cdn2727.pcspeeduppro.com/pcsp/.../pcspsetuprmimg.exe

Remove ws1911c2c0.dat - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.