» optprocrash_x64.dll
Overview
Analysis
File Details
Programs (1)

optprocrash_x64.dll

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The module optprocrash_x64.dll by PC Utilities Software Limited has been detected as a potentially unwanted program by 4 anti-malware scanners. This file is typically installed with the program Optimizer Pro v3.2 by PC Utilities Software Limited which is a potentially unwanted software program.

File name:

optprocrash_x64.dll

Publisher:

PC Utilities Software Limited (signed and verified)

MD5:

0fb93ad3a5c4fb280e2a15db663f857b

SHA-1:

1df64f13dee0ffc3c6f5cd7a9c2b7c52549ca739

SHA-256:

db7008887c3cbc95db591fbd72e6a5ed15336bd33215cccc7aeaa2a590f6cb6d

Scanner detections:

4 / 68

Status:

Potentially unwanted

Explanation:

Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:

4/26/2024 7:40:27 PM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2015.0.3345

ESET NOD32

Win64/SProtector.B potentially unwanted application

7.0.302.0

Reason Heuristics

PUP.PCUtilities.P

14.9.20.19

Sophos

BProtector

4.98

File size:

4 MB (4,147,528 bytes)

File type:

Dynamic link library (Win64 DLL)

Common path:

C:\Program Files\optimizer pro\optprocrash_x64.dll

Digital Signature

Signed by:

PC Utilities Software Limited

Authority:

GoDaddy.com, Inc.

Valid from:

4/5/2013 8:29:35 PM

Valid to:

4/3/2015 4:23:14 PM

Subject:

CN=PC Utilities Software Limited, O=PC Utilities Software Limited, L=London, S=UK, C=GB

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

2B239BABC97410

File PE Metadata

Compilation timestamp:

12/23/2013 4:12:12 PM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

49152:GDBkP4eTYND5Fr9TREgLtKFKYpwTB6b6+D2wYfrhk+nQ:GDyPW5E/K9+FgNkX

Entry address:

0x26A18C

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 8B, E9, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 00, F3, 14, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF... 
[+]

Code size:

3.1 MB (3,230,208 bytes)

The file optprocrash_x64.dll has been discovered within the following program.

Optimizer Pro v3.2 by PC Utilities Software Limited

This program is bundled with various modified monetization installers and 3rd party freeware programs. "Offer your users a free PC scan to help them find registry errors, junk files, incorrect system & security settings, plus much more.

www.pcutilitiespro.com

75% remove it

Remove optprocrash_x64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.