home

pcspvelmw1.exe

PC-Speedup-Pro

PC SPEEDUP TOOLS INC

The application pcspvelmw1.exe, “PC-Speedup-Pro Setup ” by PC SPEEDUP TOOLS INC has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from pcspeeduppro.net and multiple other hosts.
Publisher:
PC SPEEDUP TOOLS INC  (signed and verified)

Product:
PC-Speedup-Pro

Description:
PC-Speedup-Pro Setup

MD5:
c128b09086a657be2a9b1953b67aeeab

SHA-1:
d89dc560f77f8751c0a7b419e782c7fea3214a73

SHA-256:
205316b4074625ff4d099376ee81971d714a81b937e253d0dac5b9d9cb89ccc9

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
12/29/2024 1:18:30 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Malware-gen
160414-2

Reason Heuristics
PUP.PCVark (L)
16.7.16.23

File size:
5.1 MB (5,378,808 bytes)

Product version:
1.0.0.10192

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nouveau dossier\pcspvelmw1.exe

Digital Signature
Signed by:
PC SPEEDUP TOOLS INC

Authority:
COMODO CA Limited

Valid from:
5/18/2016 2:00:00 AM

Valid to:
5/19/2017 1:59:59 AM

Subject:
CN=PC SPEEDUP TOOLS INC, OU=Management, O=PC SPEEDUP TOOLS INC, STREET="104, Surya Nagar,", STREET=Murlipura, L=Jaipur, S=Rajasthan, PostalCode=302039, C=IN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5D2267724198B78721B0812ED1BFFBE5

File PE Metadata
Compilation timestamp:
1/15/2016 9:22:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:90ctKsGCsnqRYjDjOpGW4YWRO//slvyx0UEHN:90iiSYjGpt4YWRKsNfUoN

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file pcspvelmw1.exe has been seen being distributed by the following 8 URLs.

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_261387_3o1_3B45C5CC36307103157687390014_-1_4349327_15prh_533_3B45C5CC36307103156817192652_m_19_8686302414992507055_908807___2_1f_4qbt_19_

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_260127_3o1_ABF69C1898465135921525349172_-1_4349297_15prh_536_ABF69C189846513591302008691_m_19_-8562314356036530522_907297___0_5c_4q27_19_

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_262137_3pk_EFC68E15A160775822315817193_-1_4349217_15prh_533_EFC68E15A1607758211182429859_m_19_-861993999175035776_908807___0_5f_4qbt_19_

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_206488_3o1_ABF69C1898772181251960156177_-1_4349437_15prh_536_ABF69C189877218124440614730_m_19_-3752302347790068872_897237___0_2h_4bp2_19_

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_226127_3o1_EFC68E15A83935107286681692_-1_4349267_15prh_533_EFC68E15A83935106313802906_m_19_3541098038103458476_795568___2_35_4548_19_

http://cdn.pcspeeduppro.net/pcspnet/c2/.../pcspvelmw1.exe

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_262147_3pj_EFC68E15A171736288311833829_-1_4349217_15prh_533_EFC68E15A1717362871478086823_m_19_7625875250966641979_908807___2_51_4qbt_19_

http://pcspeeduppro.net/download_ip.asp?def_utm_source=velmw1&utm_source=velmw1&utm_campaign=velmw1&pxl=VEL448_VEL432_RUNT&utm_pubid=1238897&x-at=v1_7970047_210137_3ph_156DE23CE7278345861266386134_-1_4349357_15prh_533_156DE23CE7278345851980245251_m_19_-5054767499703555837_795568___0_51_4548_19_

Remove pcspvelmw1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.