home

diagnostic_pc.exe

System Checkup

iolo technologies, LLC

This is a setup program which is used to install the application. This file is installed with the program System Checkup 3.5. The file has been seen being downloaded from webtools.iolo.fr and multiple other hosts.
Publisher:
iolo technologies, LLC  (signed and verified)

Product:
System Checkup®

Version:
3.5.1.17

MD5:
5625a1b1fb1c2ec2a1b355e48c7d9fa5

SHA-1:
88caaf137dff6189e51d0f373964a26d56b08e62

SHA-256:
60524e78111e6cc9f82031f20885ecade69950c7e82d484eeb648454a2a346d8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 3:06:28 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0228
7.2.143

File size:
7.1 MB (7,428,248 bytes)

Product version:
3.5.1.17

Copyright:
Copyright 1998-2013 iolo technologies, LLC. All rights reserved.

Trademarks:
System Checkup is a registered trademark of iolo technologies, LLC

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\diagnostic_pc.exe

Digital Signature
Signed by:
iolo technologies, LLC

Authority:
VeriSign, Inc.

Valid from:
10/1/2012 2:00:00 AM

Valid to:
10/7/2015 1:59:59 AM

Subject:
CN="iolo technologies, LLC", OU=internet sales, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="iolo technologies, LLC", L=Los Angeles, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6C21770045938D8E872B30E91043E82B

File PE Metadata
Compilation timestamp:
12/23/2013 6:51:45 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:ZrAf5K8uCHOKRHyP8darz55Ogsi8X4ru1PiLuy6S4:F+KR8RWnragsaru4LC

Entry address:
0xA93001

Entry point:
60, E8, 03, 00, 00, 00, E9, EB, 04, 5D, 45, 55, C3, E8, 01, 00, 00, 00, EB, 5D, BB, ED, FF, FF, FF, 03, DD, 81, EB, 00, 30, A9, 00, 83, BD, 88, 04, 00, 00, 00, 89, 9D, 88, 04, 00, 00, 0F, 85, CB, 03, 00, 00, 8D, 85, 94, 04, 00, 00, 50, FF, 95, A9, 0F, 00, 00, 89, 85, 8C, 04, 00, 00, 8B, F0, 8D, 7D, 51, 57, 56, FF, 95, A5, 0F, 00, 00, AB, B0, 00, AE, 75, FD, 38, 07, 75, EE, 8D, 45, 7A, FF, E0, 56, 69, 72, 74, 75, 61, 6C, 41, 6C, 6C, 6F, 63, 00, 56, 69, 72, 74, 75, 61, 6C, 46, 72, 65, 65, 00, 56, 69, 72, 74...
 
[+]

Packer / compiler:
ASPack v2.12

Code size:
3.4 MB (3,580,928 bytes)

The file diagnostic_pc.exe has been discovered within the following program.

System Checkup 3.5  by iolo technologies, LLC
Publisher's description - “In just minutes you’ll know exactly what is slowing your computer down. You’ll get a customized report detailing all your computer’s errors plus how to fix them!”
www.iolo.com
47% remove it
 
Powered by Should I Remove It?

The file diagnostic_pc.exe has been seen being distributed by the following 3 URLs.

http://webtools.iolo.fr/download.cfm?filter=www.jetelecharge.com&tracking=MA_FR_PP_GO_CO_TXT_IOLO_SCAN&campaignid=Nettoyage&keyword=nettoyage ordinateur&gclid={gclid},CM_2v4mezL0CFfDLtAodE0QAlA&msclkid=&mckv=&go=http://filecdn2.avanquest.com/ppc/MA/.../Diagnostic_PC.exe

http://filecdn2.avanquest.com/ppc/MA/.../Diagnostic_PC.exe

http://webtools.iolo.fr/download.cfm?tracking=MA_FR_SEO_UC_CONF_IOLO&go=http://filecdn2.avanquest.com/ppc/MA/.../Diagnostic_PC.exe

Scan diagnostic_pc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.