» pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe
Overview
Analysis
File Details
Downloads (26)

pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe

PC Speed Up

Optimal Software s.r.o.

The application pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe by Optimal Software s.r.o has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.pcspeedup.com and multiple other hosts.

File name:

Publisher:

Speedchecker Limited (signed by Optimal Software s.r.o.)

Product:

PC Speed Up

Version:

3.5.3.0

MD5:

4e220543aecd9363cb278c0f70618a10

SHA-1:

35d1f78bfe4ed316a3603bfcde74d312e82a25f2

SHA-256:

eb9020a32a03ee140c8c788e6f4f58a2df32521358fb04cc3ffc52a64c21d4dc

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

6/17/2024 5:47:55 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.SpeedChecker.Optional.Installer.Meta (L)

16.6.10.12

File size:

5.3 MB (5,595,408 bytes)

Product version:

3.5.3.0

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe

Digital Signature

Signed by:

Optimal Software s.r.o.

Authority:

DigiCert Inc

Valid from:

10/31/2012 12:00:00 AM

Valid to:

11/5/2014 12:00:00 PM

Subject:

CN=Optimal Software s.r.o., O=Optimal Software s.r.o., L=Český Těšín, C=CZ

Issuer:

CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

09DA6E35288E3A0431B971129CCF387A

File PE Metadata

Compilation timestamp:

12/20/2011 2:16:50 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:PkqSL5Zi4CBpVJ/BgV+CfS1IGcDZe4UKXTdNW2CurxPUAbjCDsx/0Gm5BN54M1Vs:P3SVZJCBB60Ca/KXTGpE3C4x25P22Lpu

Entry address:

0x16478

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B0, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 4E, EC, FF, FF, E8, F5, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, AC, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, AC, D6, 41, 00, B2, 01... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

84 KB (86,016 bytes)

The file pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe has been seen being distributed by the following 26 URLs.

http://www.pcspeedup.com/.../download.aspx?k=1023d3aaba9c948c6ed002dd81a4ed&autocountry=1&affId=hoffers&keyword=1023d3aaba9c948c6ed002dd81a4ed&referencedWebsite=www.pcspeedup.com&language=en

http://link.pcspeedup.com/aff_r?offer_id=5&aff_id=1524&redirect_pass=1&url=http://www.pcspeedup.com/.../download.aspx?affID=hoffers&k=1027a709f9d80d9756494857b3de06&urlauth=413947272938526665063509667681

http://link.pcspeedup.com/aff_r?offer_id=5&aff_id=1524&redirect_pass=1&url=http://www.pcspeedup.com/.../download.aspx?affID=hoffers&k=1020c0759386d1678d895626a813a3&urlauth=710721712355227741625137696196

http://mail.pcspeedup.com/.../click?upn=oh1Qc5nqYYZ5nLsreWm-2BiCfe1Pg6uHkikvGa4CEVC-2FRE31d1lM-2BuFTIFzrpHOYmdvklmp6cWWCTP95aM2DykkIT8-2FQyYPdfE4JYc1jAf2Cs-3D_2HJ1y-2Fr79M4cXeoSwQ5ZRRwmnoVkPGvTtZSyPerRSDdMOEDYIjrvplxlgcPVqRidAL-2Fb6FqSbAY1qJUJoC5kt0RUxt87eGRTFpelq2dH-2BXVBCs5RMsHQAzF5dA6jjLjHiQtp22MWKRCMLrPWJAG5WcpK3pGwcDqVeGUUZyzKr-2F9P-2BHDwZozSqrZdAumiiBl76G7r8t93LNDTVfoo2UbfAA-3D-3D

https://www.wifiprotector.com/.../response.aspx?&requestId=9712053a653b4a3eac3610f631171177&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=unblocker&affId=janusz&keyword=unblocker&referencedWebsite=www.pcspeedup.co.uk&language=en

https://www.wifiprotector.com/.../response.aspx?&requestId=01c95fbcea52435ca9b5299cdb06f005&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?affID=hoffers&k=102a7d869b923801fc73f057d7857c

http://link.pcspeedup.com/aff_r?offer_id=5&aff_id=1784&redirect_pass=1&url=http://www.pcspeedup.com/.../download.aspx?affID=hoffers&k=102a7d869b923801fc73f057d7857c&urlauth=582842478037713783442955667211

https://www.wifiprotector.com/.../response.aspx?&requestId=86b682a77b384a0b811cd4891d41dcfc&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=es1&affId=softonic&keyword=es1&referencedWebsite=www.acelerarelpc.es&language=es

https://www.wifiprotector.com/.../response.aspx?&requestId=fda37f7fb8304f299e7e598913665fa8&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=beforetip4&affId=janusz&keyword=beforetip4&referencedWebsite=www.pcspeedup.co.uk&language=en

https://www.wifiprotector.com/.../response.aspx?&requestId=cc126bb7c33a457a91718373e389fd62&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.me/.../download.aspx?k=SENSpeedTest&affId=adwords&keyword=SENSpeedTest&referencedWebsite=cz.pcspeedup.me&language=cs

https://www.wifiprotector.com/.../response.aspx?&requestId=02f1a4697ccb402fbff553784f92b98e&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=10269154b49d6f5ec0c2c5fe749b54&affId=hoffers&keyword=10269154b49d6f5ec0c2c5fe749b54&referencedWebsite=www.pcspeedup.com&language=en

https://www.wifiprotector.com/.../response.aspx?&requestId=076d8b4605494d4a83115ae67c30514a&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=102bdd9b2b7ce81a5277633bff4a6e&affId=hoffers&keyword=102bdd9b2b7ce81a5277633bff4a6e&referencedWebsite=www.pcspeedup.com&language=en

http://www.pcspeedup.com/.../download.aspx

https://www.wifiprotector.com/.../response.aspx?&requestId=735817b781124dbfbdf7362a2325a65b&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=102516032ff0425a1a3d13b934f772&affId=hoffers&keyword=102516032ff0425a1a3d13b934f772&referencedWebsite=www.pcspeedup.com&language=en

http://www.pcspeedup.com/.../download.aspx?referencedWebsite=www.pcspeedup.com&language=en

http://mail.pcspeedup.com/.../click?upn=oh1Qc5nqYYZ5nLsreWm-2BiCfe1Pg6uHkikvGa4CEVC-2FRE31d1lM-2BuFTIFzrpHOYmdzNXajHYm23xAyhIEMDYcv-2FfGhO1xub-2Bs9aBTp2R-2BWVo-3D_we2f6eWhYdD-2F-2Fq388jCC3jDim3Ahite6DgEwn54TZZHqSqiZM80grtLd7OBrJSbJJIxnxpg14v6p9KKJGuxSx7nX5QBTSoP-2FADRUF-2FJVP09vkwmOKl2SQJ8JHCjbRhQ3DfLELdgQtJS-2F5iqQ7kJq7enslyL-2FGETkLJaluFmvbs6IFUarLw8DzqidSbD-2BJ4Z5

https://www.wifiprotector.com/.../response.aspx?&requestId=4abe18346c2b43609fe729127c0b1cae&encodedInstallerPath=QzpcaW5ldHB1Ylx3d3dyb290XHByenlzcGllc3prb21wdXRlclxkb3dubG9hZHMvcGNzcGVlZHVwLmV4ZQ==&edition=

http://www.pcspeedup.com/.../download.aspx?k=2ipru&affId=janusz&keyword=2ipru&referencedWebsite=www.pcspeedup.ru&language=ru

Remove pcspeedup_a6e15634e3a84eb59797de80a2d581e7_.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.