home

pcspsetuprmimr.exe

PC-Speedup-Pro

PC SPEEDUP TOOLS INC

The application pcspsetuprmimr.exe, “PC-Speedup-Pro Setup ” by PC SPEEDUP TOOLS INC has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.pcspeeduppro.com and multiple other hosts.
Publisher:
PC SPEEDUP TOOLS INC  (signed and verified)

Product:
PC-Speedup-Pro

Description:
PC-Speedup-Pro Setup

MD5:
14601d3a23edf4c10e578e4c16281726

SHA-1:
df4eec6f82c3abe94bf225feb678ec5941289a02

SHA-256:
bbaa386201f933ea898aeb80cd9f6eb70108183036c24cc8641eb618aef59a73

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/24/2024 8:58:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.PCVark (L)
16.7.16.23

File size:
5.2 MB (5,442,600 bytes)

Product version:
1.0.0.10958

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\pcspsetuprmimr.exe

Digital Signature
Signed by:
PC SPEEDUP TOOLS INC

Authority:
COMODO CA Limited

Valid from:
5/17/2016 7:00:00 PM

Valid to:
5/18/2017 6:59:59 PM

Subject:
CN=PC SPEEDUP TOOLS INC, OU=Management, O=PC SPEEDUP TOOLS INC, STREET="104, Surya Nagar,", STREET=Murlipura, L=Jaipur, S=Rajasthan, PostalCode=302039, C=IN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5D2267724198B78721B0812ED1BFFBE5

File PE Metadata
Compilation timestamp:
1/15/2016 3:22:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:rFxLvMwRAqsNj9ydXvdlPXIDPxUTCTZIGGAWi1ERupX7zFwBw:x9vMXqs19afbYpG5GGAJ/NvFwBw

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file pcspsetuprmimr.exe has been seen being distributed by the following 13 URLs.

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_OyjKNEGEsbagPFzCI6JZbUNoRtskzBw4of4ljWLWwk1zDh9e2VJcExFk5iRn62ZN1ly2ghRmlwtf-qHnc-nF0pHXNdV6XIEHGole0vXsBFEs3UZUSmwA9qx0kYEnbG4Z6pcU66fFM-wipBrOa751MhLbhwdHbig8RYdiHzA4CQxaTDp6mry2lKPAN-j90LC4-a1ioVSbbYGOhrIaVJyBAbBMCdTE2XyVwyJqi5iwRlVRfRhh_EyyVIIAgGvzkettuORGUVAJfBwGWUgqqtK7Hq3Qr_VK2F6CyIO9qj4kzdv1-lqoNtw40mO1niqSyBl5o-mXWtHJfuDMcTibTgxatfZNwWfAHphHC-7SXdNeE4gb_dTwZIwxlr1xyNxbxbJhmjyj0wdbtXzP7fmWY2AiPuvtrTNHqSNBrY0xLApaFa8uk6OToNRSFK9VO6WWMsSeLkLjahCLIPQIwngOBcYd-NejOXIH5doAUnzMrUVFgni2tBknRx9Iuh3xUoknIKAjMr_ufrBfrucFAMUyx5DONmk1_8V5xXMCDQlqQttA&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70445197&x-context=adkm_FAhxn6Ztap-BNGquFak92DAbx-76O5vLJ8QsabEib7vn5YDPB6MGmvWKhcCwLXR63esMO8XE6anNUM3VFp8CN5tdEL4RNkc5L7_aY0P3WZx4W9lvfnybf6j2DZTNGdAPesWQDiwh4xi7oOV4OldoQmghczivFotmKCEm_Of4dEeI0zs0aBGhO5fFGJ_xwJi0S3CcBx--4qpD8K3ERqoz2tZBm11vRve8Cwz0_2fSaY_OXM2f7t-GwqpkP3STwBIzTC9gU7CTgYRQNaEWCbzw9wcZLxqwdwpI63mUY6W0rqswjKdlU4uvRS_Egyu1eoKLtIhgb5bIPJhfsdks2lAfSjYIHYHL-ByQIOwizRxWwRq0OfVHJ7IAma04R4v26Qy5lozp_W5m6fFHTxj0MvOF2wUupD1UID-mULAdaavOEFphvu12rS-sN00jRR0aNHbH_JItKsOPUm8J_uk9ieOa-oApaJqgpgJS4s6YmaopVITrTnSJeTjqJcehuFb1iA_Uo86cYzePRGYiIxJEUwusTPQSuUm3gYilKARW4U-oz_369t8KWCatNPY&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_q3YZZq6YQZKpM3RRU-a9mQ80sh5tWas75PjXyavznhNDfzuxhVuIaJLdOMZuCqftGvNMU1SVQ4fBbNkBG7FbRk2wyTb_VJTt2yq1-L5HewM58is5eYnXLKd9C4gZBNoiJmx4rz9gAWYnlHoMOyAtxjK05rGms_vpmu8oE-uTftFYRBBqkTUDIm1Ri-Ys8shzclyc_FrA148F6AWrlOR-_uJwIt4ChFVzrizo0-8fiXDvfIeg5ST9Z51hP7AuS92THL_N7gkQsDdzF5hcctOxB3V59wY-pvcNgxCoPuWEw_srrjzzkJjt4BbsJvDTuTljob1R0hvxhUnp_Sj8pMaAZb0KRaQkpkq1Xxdn2P-NCwbNDXN2UOZUXqkBgGqVQ6CQZ_LJj2sBxu0AxmBN_3idM0C8HBPN2EUiDSXq1mN-PU02RXp4N_TFpNHZmJPVSW1HUEHyToSD7cBQc51yZFfhcx44i8RVwLJgfcx9YLQB2l4_dNw7CgY7naJbUmkFr-fg2KBxdNqj89wo-XXaBVER2d71WLLmDorHIc8ndQqId1H0_-0PPmc-4hAjNstmlUn5a_CP&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_qc5L1Z2sDCfHKS96ZvfuoLq_jCaibjfL0n45D5c-ysZPP2Aq3VHujP78oXJHwwzQ2vAQo3BSx63ao5DO9mhcn_abqHoCdsm5C6mh-oIvGZkwuv5BnJi4kBecllAgzw-15idN5-dYHu3xYZldkAL4B3gl9bpAqdM8PnoW_8aBDtAA5Fh-23iSX_TJS5Nsi1OquGvIcsMGUoJ8nkI9KM1-U760WSUIF_8KknttXGcVq5hgvJsLbWXYS0r3Cij9OXacK7p-6OHjwkDbzCuMDcVjjSgzE4jbnUVkFfdMRiWkFEgAnvRLRwBapFC2qH6bYa0MLmeRiuluFfms_P_XpzrojcZY7okzI-Uj2SlWZ-F7avNjIu42f7BrReaXXJWpZnlcbebWa8HCc61BUzu8LRd4RxlyqjSFImkpiM29VRNGv6SxkEZ7hBj4sHeo1bjdHropsbILMaRmp3jA-9XY_nHYlA9x8mm5C5GkDPzVZMcG14lTYyt6xCT-M4ZAMHTtN8XhOWOE_jX94oLsHrH9JhqCRXl_Gu8-Uc7P0jL3gSA&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_auyPl-crSmSkTBoYdmS3zjww9tZ1HCjM4ZYWwv206w2UfeNisONaLFBjmdJwjVbF7YUqabAqlg8I8G-ayKcevYcHxPKihtjX8dZ8heWRr8H6m1n0TNOxMVH7uRFrj_KY-HG6icCldmrPA1zwvblUf4aAWl8rL2TkRfVLGJcqNS-ErPb6_h_1YFMMAa7faRwKFjAROGOOJPjG78swhepJjBC81zMb6T5svXgZaJXPTdVo1F4k42tQF9qZb1E24APYNmEPC62CLGN91fRt7W0e-7SJ9SFq3QcvavPdge53Zu_Y32_fAVqzPKi0fUDA6puw9n2uJQK1rGFz5D3-__9hiAd-EPEtAXjIUCh8h2V67eSYQoFpCANkayZ-zPOM44Qf8f7aPP2DaMYMlcKBltqTANZdnabhgPdSE6S-bfcNK9M1ClTaS85WrLPw1reI0fwglvl3q7pcAzXLaHr0QoT11xusD-K_vkstyGFBA85g3QGc8Vv-NqvEXqWBIaEIVDkqWojl7nRjbW1fi9sjmCyweWK5M5c2&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_gvYr85Zk3gZE0BVqU9y1iAXf--OyR6G5omU1hncgmILlrrxlFMEP-pZvdPXJ4Sxg6fAlDn9EiyBssLSATzhz-U18xtRkzN35CqSWZt0Kp0205F65R0bCe4-yGn7c4BUT6roG8JUpswJWf2CZcujsdq_F7CfzbCsH8j4nG8olfKhXYvDGtF0JWpoUzVgdr3lioI5GpW31QhHuqdXHOG0Z0vmINe0wx71af1oCa_BWOeF4FKd3mxYUv4RkqNAeISacOoFk2pYq3fN_PlxXOv3ZiXPXyvFFlS69JFY-RwaqUv0gMpmrwAopViebIPUwEErkI-l5bxT-igV55y78Io3kcnpT83j8n16dF038yldKczcGLSokUxvaudGTuagy76xVwUjTCCgWZO49a58FEtwkD0WxLpZjUD_KjHPj1bMO9QjyOh54MwXnCy29GqpkjlTNi7JlrJ5jYuU66NQ_o3KZEkk0VeHfTe77vBOsWCgx5sAVSoAS-GUbrlCwuPG7ichmEuhBjXVdOHkxEG68U3sf5ARlr9-Uf9f1BFH9LD-JnCgw0Rw&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_So9A3vztDeXjO-CIkW1tGyIHQ02xI95SrCdlajKB6af67FWVdjv8XkgnDV4KwEf6TOl_IkbDsutxDaIfk3bTuo4Qz3rjBtKpD9Fs6WMxhFEYjx_A_PSfO3MPHa2OVjaGcIFUv7CeZOVvtm9hLayJnn05e6NUAArqkvHFjca4rY-cJVItOkr7SpJX4L-2DXXpCIDpmu17iNXM74RGxhwLhmQzlvZ1ta4M-S_CkMCwLSsgcMo2GVMNt2y391nsKhbtEBAzS8MDb_uXFtbm-DJsC5XU2z6W-865ARha4ku3Kc-AkjPIWLE1hba-tcTdMa7z-v2hWENBm0-uZ-SVDYM3ZFEza97zUr84tQ969ZIvBXoqcIydPnl2tohMW85RyXpgf8c64YPZ1Jkjpp9rj-hwqftojxs94yP6qCo2RjMQm5S4MRrygDYbR4z4U36cczkogRXArEji9GqrB7F1Wk2vYO9XduseLH_UcbzBX28VzIDpC4hyQ_-MSP0LwImTcFYNa1t6Pq9I3vJgovAD7TjLyRlSZVM9PLipghzcUSlXGR9Z9wN6bEu9DbkZ2-XORk0QBgp9IYeEci0x&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70445197&x-context=adkm_yhiz2Dhh7evCnZpxeyQF-_xDaR8hh6wa7CAFPfnMvoH1egtQLyhb1dA5wCpqginmRrNPxDvS7dgsxaqnpjQSDGIBoAhYyTQKy7hTVvZSWZ5_XAht_fdJDA6qs9--c1rMQsh2zgSIWGcmOJgykg_CTQofIWp-deT1-2rdEzkBlTbJuKDjz36AtX74QIBMIAikWSWPhdDHg8ee-zbByOxWqlGslDdkwgijTxuUVPF5KGaKvYSdjXakEnxqB0i3_KDzMkr7w3PES8ufx7zBA0UuMFJTeISm69F_8_-gW-2Lowi7q9RExCrm3iiuisBDEUyBlhsy4Br6_AVsn9Jbyg9ralQtFdGOaAvYMD--twEqkUEkbZcHEfs4Huzen11Y4NdtvC6DLYmuRgNph3RxmxXNDa2pgf4hnp-gTQNHkySn0ScMeM75SWZpnKcOa1m2y76ZQGMHKBBuuQaCTWR1moUDNL4RCX2QPLT1dxEZ_mlRTnc5qYwxDu9hSS98LfHzdTLrjKkRzLqBz8YTzp0f1Er8jx0d4ONWgcidwhW7DBRk5f9ugw&x-at={A}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70445197&x-context=adkm_63dZqnnv32ck_5LwdAc_fteAnx_58U3YSTAcrkrD9zKYMbUNAoWypZ9xRkdiVomS8mMjUYR0E4cOE4f9H7wG7xaEGcYtVIWNhxyUi0H1PN-iBSOTeTtq_uYV2dELaT3Ob7EYWXMg8RaoQkSifxqcZoLdQCHPl69cIIUceSwC5TIugRrvtDy3vKyrEOoZhPmEWA3Luwk3Y0nL93NDtKCzUydxWvOQPAF-zB-KW8YB7SOtN0204xAXNpR7-VFRZa-IRGz8be-GteGx2qxAbVFI7cnA9ILiDovLs1r1OfTKjO1UYipFj2tnZyfUoMBllrs80hKVNH2KVfGB6V8s-qRyWABdsyPt3a5_69yHblvIKW6VzxvdRFB1RYKotBl88tXcrIEsA1jpDMlYu9whl_zSI5yy90BsUZX74ZFWW8DMFpYM1DM742cpua7SCJCj8REzGW6g8cf51ZG7VXzzfGyoCd5gQXsFiyMZ9MQC0yjsQTKiyWVv5mnitMs9cXFtGpbIZyq_RBobkIxb_kHhNkj-0QfK55tN3Y8NL38nVqCJff-TVij6Sse0OKDnHkOr69loYIOx9c55AJyljJQhKcYBzSU&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_qLbhLvGmuFObV0h4Pm1v90p6NYxkVXVUPOYxl_3f1qwm0sotQBE1tnupSeqaX7qGf_ORJGuMb7APrvTA2pqIz86M2OpZD7I8pTB7mHif8kvQUnlJCUwmkuPp_12OIEtRSsjZyXswIHjDLBaOzOOmQBXKJViUjjne-Qmogw7dX9XeXMF6a4TQRVDtj-jwNazaYbRwfqljhaQKhDOuZD2WxEytV0xvZq8qmEEhttcdfv4yKke3iBrNUv7d0Q_HoG3u6D6JnOjeVytaoTEwH-Sssd_r6rlaQUpyinMWveNn3809qSEpP8nsMpJ5IfVoxt1V0OpVnE6klqcUsxnrOSVubJ3zrMAH6FAEGdA3K_wl7iZhl0tH_NpeTHUtic0FqC0tPxJDoubKiaPMsb8teiNkJB7t4mL-A2kTZgNDYLsdNEBJzVUYh8bc7L3mUopavCi1wtowwB4yRxhCLbOkXlrx_p_570JaYPBNt5JNZelb6renXGQwu1w3RcCj5EYAHdzwaocnHlZH4r_K_F21vsusJU1FaSsaSHKHBxgR0zatDUWad2J9ZDI&x-at={d}&pxl=MAR9_MR20_RUNT

http://www.pcspeeduppro.com/download_ip_mrnew.asp?utm_source=mr&utm_campaign=mr&utm_pubid=mr_70447034&x-context=adkm_AOhDTrZcAps_3NEqZXz3XFKw0oxF9YQ-SjlIU9fO_e8wXrH2G0dGIOAceUhTjphbknkjh-O_gWy_-bVI-mjYEEFZeE6bGuxwfQllxRWqxmoejZd1CLUfDoyfoxxAirx8zgsRLLx-MMq5YL9Xk8Po234xM_vW9LNnoQG_e4u8zbqlh9AoZM-iLPpajUkYw2y_9edZZTH4PJ1coJquy84QGCI4uKUXhgsVt3jOkXJXTr9AgkjoZPNwt6WH6NbfCdOiA0lPhdQSgT42whoedYi99dyvHowoub903_PSF6xVuHjEbf4CP7PbLtOxOJO2Gz6j4kt2H0D_YF8XoeFgh_QugVYTQNk0CkdRM8aCzPgaiE_cXHvSuqbwtCDww3ucriz7vbPe_Ks7x5prTOGS2sNSBhof09BaBRdwvJ8th-HH6DNIpRiA76OFv2y4jUa0y-L4HiD78J2ud-dIovJdVgjEN7h-4Hk8oaKlaIiXBuH1mQEehwXyybI-oPBFO8q1qCRI6w8Yqv8rBJix-d3w6g83IA-Wiq0vFEM5VV9eksrk&x-at={d}&pxl=MAR9_MR20_RUNT

http://cdn.pcspeeduppro.net/pcspnet/c2/.../pcspsetuprmimr.exe

http://cdn.pcspeeduppro.com/pcspnet/c2/.../pcspsetuprmimr.exe

Remove pcspsetuprmimr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.