» UpdatesDll.dll
Overview
Analysis
File Details
Programs (1)

UpdatesDll.dll

Pc Optimizer Pro Updates

Xportsoft Technologies

The module UpdatesDll.dll by Xportsoft Technologies has been detected as a potentially unwanted program by 5 anti-malware scanners. This file is typically installed with the program PC Optimizer Pro by Xportsoft Technologies which is a potentially unwanted software program.

File name:

UpdatesDll.dll

Publisher:

Tweaking Tools Inc (signed by Xportsoft Technologies)

Product:

Pc Optimizer Pro Updates

Description:

Updates

Version:

2.0.0.8

MD5:

c9a547292892782c9ee9d0b7bc8fef28

SHA-1:

852831861d88283cc043b7c37f1d51dcdd1d5545

SHA-256:

28400d4598ad165e02bfe2a9d7db48ef2cbcc62da03291eac19f45a6c9e7a762

Scanner detections:

5 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 5:25:59 PM UTC (today)

Scan engine

Detection

Engine version

Baidu Antivirus

PUA.Win64.XportOptimizer

4.0.3.151127

Bkav FE

W64.HfsAdware

1.3.0.6979

ESET NOD32

Win64/XportOptimizer.A potentially unwanted (variant)

9.11905

IKARUS anti.virus

PUA.XportOptimizer

t3scan.1.9.5.0

Reason Heuristics

Win64.Generic.XportsoftTechnologies.Meta

15.11.27.8

File size:

1012.8 KB (1,037,080 bytes)

Product version:

2.0.0.8

Original file name:

UpdatesDll.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pc optimizer pro\updatesdll.dll

Digital Signature

Signed by:

Xportsoft Technologies

Authority:

COMODO CA Limited

Valid from:

10/23/2011 8:00:00 PM

Valid to:

10/23/2013 7:59:59 PM

Subject:

CN=Xportsoft Technologies, OU=Admin, O=Xportsoft Technologies, STREET="Near Gugga Maadi, Kohjkipur", STREET=Kardhan Road, L=Ambala Cantt, S=Haryana, PostalCode=133001, C=IN

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00B836BB5EBC9FBEE7AC39B7D577D1EC85

File PE Metadata

Compilation timestamp:

8/1/2013 7:01:37 AM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:gmCcJFYJJxwOj6/Qh1+MMHb/g/JO70FDcAuDK3Hitl56Mxke8Zmxwh5d:HCcJCJtGo50I/w70Vyr56E8Zmxo

Entry address:

0x49B54

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 43, 88, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, AB, FE, FF, FF, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, 48, 85, C9, 75, 0A, 48, 8B, CA, E8, 2A, F0, FF, FF, EB, 6A, 48, 85, D2, 75, 07, E8, DE, EF, FF, FF, EB, 5C, 48, 83, FA, E0, 77, 43, 48, 8B, 0D, C7, 89, 04, 00, B8, 01, 00... 
[+]

Entropy:

5.9008

Code size:

395.5 KB (404,992 bytes)

The file UpdatesDll.dll has been discovered within the following program.

PC Optimizer Pro by Xportsoft Technologies

PC Optimizer Pro is a program that is promoted as a system optimization tool. Some versions of this program may display deceptive or fraudulent claims about files, registry entries and/or other items on the system.

www.twekingtools.com/PC Optimizer Pro

71% remove it

Remove UpdatesDll.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.