» PCAcceleratePro.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (2)

PCAcceleratePro.exe

PCAcceleratePro

DisplayTime Software

The application PCAcceleratePro.exe by DisplayTime Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PCAcceleratePro’. Additionally, the file is typically installed by a number of programs including PCAcceleratePro & Instant support by Installer Technology and PCAcceleratePro by Installer Technology.

File name:

PCAcceleratePro.exe

Publisher:

Installer Technology (signed by DisplayTime Software)

Product:

PCAcceleratePro

Version:

1.0.11.0

MD5:

47f364ecc161cc1c89c3b77409b99719

SHA-1:

4804d158bf9a8efbd29ab5c14c3aa1a1cd928444

SHA-256:

a9369cad57fed186698d839d9e06853c9018203b2193677dbe5e0b5401fefe86

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 5:29:48 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallerTech.Optimizer.Meta (L)

16.4.5.5

File size:

9.1 MB (9,528,472 bytes)

Product version:

1.0.11.0

Original file name:

PCAcceleratePro.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pcacceleratepro\pcacceleratepro.exe

Digital Signature

Signed by:

DisplayTime Software

Authority:

COMODO CA Limited

Valid from:

3/17/2015 8:00:00 PM

Valid to:

3/17/2016 7:59:59 PM

Subject:

CN=DisplayTime Software, O=DisplayTime Software, STREET=28 Old Rudnick LN, L=Dover, S=DE, PostalCode=19901, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

7A37A59103ADB39A13DB8D76AB62BA4E

File PE Metadata

Compilation timestamp:

2/11/2016 9:47:00 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

196608:rTLKodKiQI4lH+P/AovF7yseHZ4F5PKx/e7+m7+Cex2CtCdFLOyomFHKnPC9:rTLKodKiQI4lH+P/A2M47+m7+lJcFh

Entry address:

0x1E289E

Entry point:

E8, 7E, BF, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, 70, 9F, 6A, 00, 75, 02, F3, C3, E9, 49, 12, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 6D, 8B, 45, 08, 85, C0, 75, 13, E8, 10, 79, 00, 00, 6A, 16, 5E, 89, 30, E8, C0, C5, 00, 00, 8B, C6, EB, 53, 57, 8B, 7D, 10, 85, FF, 74, 14, 39, 75, 0C, 72, 0F, 56, 57, 50, E8, 0B, 6C, 00, 00, 83, C4, 0C, 33, C0, EB, 36, FF, 75, 0C, 6A, 00, 50, E8, 99, 79, 00, 00, 83, C4, 0C, 85, FF, 75, 09, E8, CF, 78, 00, 00, 6A, 16, EB, 0C, 39, 75, 0C, 73, 13, E8, C1... 
[+]

Entropy:

6.4878

Code size:

2.2 MB (2,269,184 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

PCAcceleratePro

Command:

"C:\Program Files\pcacceleratepro\pcacceleratepro.exe" -startup

The file PCAcceleratePro.exe has been discovered within the following programs.

PCAcceleratePro by Installer Technology

About 7% of users remove it

PCAcceleratePro & Instant support by Installer Technology

About 1% of users remove it

Remove PCAcceleratePro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.