home

optprocrashsvc.dll

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The module optprocrashsvc.dll by PC Utilities Software Limited has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a separate (within the context of its own process) windows Service named “Optimizer Pro Crash Monitor”. This file is typically installed with the program Optimizer Pro v3.2 by PC Utilities Software Limited which is a potentially unwanted software program.
Publisher:
PC Utilities Software Limited  (signed and verified)

MD5:
012a0bfaed1472b31192c4bc77e59653

SHA-1:
5b90431ff05068f8cd8fe249b7de8e4dafaf3ff2

SHA-256:
125ffa2743ce668947ac05b3d016f94cd7cd09b5e1f853299cf8da61a0437bcb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:
4/19/2024 10:07:27 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.PC Utilities.PCUtilities (M)
16.2.15.19

File size:
185.1 KB (189,592 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\optimizer pro\optprocrashsvc.dll

Digital Signature
Signed by:
PC Utilities Software Limited

Authority:
GoDaddy.com, Inc.

Valid from:
4/5/2013 11:29:35 AM

Valid to:
4/3/2015 7:23:14 AM

Subject:
CN=PC Utilities Software Limited, O=PC Utilities Software Limited, L=London, S=UK, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B239BABC97410

File PE Metadata
Compilation timestamp:
12/23/2013 9:51:50 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:rnfigs4MBsuPdmwdAVZHGD8IRS30LT++FycEMsWjcdnpqibtyZIgmsZKVjuh6yw3:raguh2cRt++eTcibty+gH0Vjuh66zo

Entry address:
0x91A8

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 5D, 4B, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 60, D4, 01, 10, E8, 39, 1C, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, E8, 16, 02, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, A0, 70, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.0338

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

Service
Display name:
Optimizer Pro Crash Monitor

Service name:
70e6ca8c

Type:
Win32OwnProcess


The file optprocrashsvc.dll has been discovered within the following program.

Optimizer Pro v3.2  by PC Utilities Software Limited
This program is bundled with various modified monetization installers and 3rd party freeware programs. "Offer your users a free PC scan to help them find registry errors, junk files, incorrect system & security settings, plus much more.
www.pcutilitiespro.com
75% remove it
 
Powered by Should I Remove It?

Remove optprocrashsvc.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.