» optprolauncher.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

optprolauncher.exe

Optimizer Pro

Subeo Tech, Inc.

The application optprolauncher.exe, “Fix, clean, optimize your PC!” by Subeo Tech has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Optimizer Pro’. This file is typically installed with the program Optimizer Pro v3.0 by PC Utilities Pro which is a potentially unwanted software program.

File name:

optprolauncher.exe

Publisher:

PC Utilities Pro (signed by Subeo Tech, Inc.)

Product:

Optimizer Pro

Description:

Fix, clean, optimize your PC!

Version:

3.0.1.0

MD5:

640b06f531021af9bc4b325ff698b4b4

SHA-1:

9a5077d378616017270fc2f5e1dd4b649e8f8119

SHA-256:

5607f1b52b0f53e9d54d43927c916d71aefe8013f14f52caca86f57d3a48c7c0

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/25/2024 9:54:04 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.PC Utilities.SubeoTech (M)

16.1.29.8

File size:

187.8 KB (192,304 bytes)

Product version:

3.0.1.0

PC Utilities Pro

Trademarks:

PC Utilities Pro

Original file name:

OptimizerPro

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\optimizer pro\optprolauncher.exe

Digital Signature

Signed by:

Subeo Tech, Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

11/22/2011 5:49:01 AM

Valid to:

11/21/2012 9:14:37 AM

Subject:

CN="Subeo Tech, Inc.", O="Subeo Tech, Inc.", L=Reno, S=NV, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

27D4E25FB4CFE9

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

3072:jsZhwpBPzeU5+alsdRMP0VflqMp3yjbgPv+Z4eHuBkih3Rxt+gH0ajuhd3of3:jsDoB7nFCfM8VfUMpU8OZTH2/ExY3

Entry address:

0x6B380

Entry point:

60, BE, 00, 70, 44, 00, 8D, BE, 00, A0, FB, FF, C7, 87, 9C, D0, 04, 00, 78, E2, 81, 94, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07... 
[+]

Entropy:

7.7013

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:

148 KB (151,552 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Optimizer Pro

Command:

C:\Program Files\optimizer pro\optprolauncher.exe

The file optprolauncher.exe has been discovered within the following program.

Optimizer Pro v3.0 by PC Utilities Pro

Optimizer Pro by PC Utilities Pro is a program that is promoted as a system optimization tool. Some versions of this program may display deceptive or fraudulent claims about files, registry cleaning, etc.

www.pcutilitiespro.com

86% remove it

Remove optprolauncher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.