» SpeedyPC.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SpeedyPC.exe

SpeedyPC

SpeedyPC Software

This is a part of the SpeedyPC Pro software from ParetoLogic Inc (sometimes bundled through 3rd-party installers). The application SpeedyPC.exe, “SpeedyPC Application” by SpeedyPC Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler named SpeedyPC. This file is typically installed with the program SpeedyPC by SpeedyPC Software which is a potentially unwanted software program.

File name:

SpeedyPC.exe

Publisher:

SpeedyPC Software (signed and verified)

Product:

SpeedyPC

Description:

SpeedyPC Application

Version:

3, 0, 2, 0

MD5:

36a26cd90dd69a8d3fed031e216000f0

SHA-1:

5da1171b70a608b7bbf67a04768eade8e74554c3

SHA-256:

c73f61df8403ae0e5392657f5e1c07e413b040b2c5982b18e04acde6a0a07302

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/5/2024 9:54:14 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Task.I

14.10.16.11

File size:

12.4 MB (12,985,680 bytes)

Product version:

3.0.2.2

Original file name:

SpeedyPC.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\speedypc\speedypc.exe

Digital Signature

Signed by:

SpeedyPC Software

Authority:

VeriSign, Inc.

Valid from:

9/11/2009 12:00:00 AM

Valid to:

9/11/2011 11:59:59 PM

Subject:

CN=SpeedyPC Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SpeedyPC Software, L=Vancouver, S=British Columbia, C=CA

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

68D2742E069E0C168138127B757794F2

File PE Metadata

Compilation timestamp:

5/19/2010 11:10:03 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:wfnMQNYNr5ZVuM/wAi8KKvVXOjfujmRfm8KKv:wfMQONdZ1pOpF

Entry address:

0xCD416

Entry point:

E8, 23, 4F, 01, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 48, 53, 33, DB, 57, 8B, F8, 3B, FB, 89, 5D, F8, 89, 5D, FC, 75, 22, E8, 46, 32, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, BC, D9, FF, FF, 83, C4, 14, 83, CA, FF, 8B, C2, E9, 77, 02, 00, 00, 8B, 47, 14, 99, 8B, C8, 8B, C2, 89, 4D, EC, 83, C1, BB, 89, 45, F0, 83, D0, FF, 3B, C3, 56, 0F, 87, 49, 02, 00, 00, 72, 0C, 81, F9, 08, 04, 00, 00, 0F, 87, 3B, 02, 00, 00, 8B, 47, 10, 3B, C3, 7C, 05, 83, F8, 0B, 7E, 46, 99, 6A, 0C, 59, F7, F9, 8B... 
[+]

Entropy:

4.9477

Code size:

1.1 MB (1,110,016 bytes)

Scheduled Task

Task name:

SpeedyPC

Trigger:

Weekly (Runs weekly on Sundays at 04:09)

Description:

Runs SpeedyPC at Scheduled Time.

The file SpeedyPC.exe has been discovered within the following program.

SpeedyPC by SpeedyPC Software

Publisher's description - “Thanks to SpeedyPC Pro, it is now easy to find out. This innovative software scans your PC in search of ActiveX and Windows registry errors, process performance problems, dangerous malware, privacy files and junk files.”

www.SpeedyPC.com

75% remove it

Remove SpeedyPC.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.