» perfectoptimizer.exe
Overview
Analysis
File Details

perfectoptimizer.exe

NetClass学生端

WeiSiTianYu Software Develop Service Center

The application perfectoptimizer.exe, “Perfect Optimizer” by WeiSiTianYu Software Develop Service Center has been detected as a potentially unwanted program by 8 anti-malware scanners.

File name:

Publisher:

Miracle Technologies (signed by WeiSiTianYu Software Develop Service Center)

Product:

NetClass学生端

Description:

Perfect Optimizer

Version:

5.2.6.335

MD5:

dacf0c3b0e40c69f4f41e9771ab31be8

SHA-1:

f2170b3da419bb40054ccbf01fb106896902e1c9

SHA-256:

1229f653082db09f9b32d6c9192056914eb41128fd3f71b755d9a4aa8e31d777

Scanner detections:

8 / 68

Status:

Potentially unwanted

Analysis date:

11/25/2024 6:54:08 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Riskware.Adware

7.1.1

Avira AntiVirus

Adware/PerfectOptimizer.A.110

7.11.103.154

ESET NOD32

Win32/Adware.PerfectOptimizer (variant)

9.8829

Malwarebytes

Rogue.Multiple

v2015.07.05.09

Microsoft Security Essentials

Misleading:Win32/PerfectOptimizer

1.163.1557.0

Quick Heal

Program.PerfectOptimizer (Not a Virus)

7.15.12.00

Sophos

Generic PUA PC

4.93

VIPRE Antivirus

Trojan.Win32.Generic

21714

File size:

6.7 MB (7,065,024 bytes)

Product version:

5.0.0.28

Trademarks:

Miracle

Original file name:

PerfectOptimize.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\Program Files\perfect optimizer\perfectoptimizer.exe

Digital Signature

Signed by:

WeiSiTianYu Software Develop Service Center

Authority:

WoSign, Inc.

Valid from:

7/31/2009 3:30:00 AM

Valid to:

8/1/2010 3:29:59 AM

Subject:

CN=WeiSiTianYu Software Develop Service Center, OU=Class 3 - for Microsoft Authenticode Signing, O=WeiSiTianYu Software Develop Service Center, L=Beijing, S=Beijing, C=CN

Issuer:

CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:

2BBBFDC500D3B0F2A0BCF6F0BB1D1521

File PE Metadata

Compilation timestamp:

4/11/2010 2:07:59 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:875VYl/3Fs5Avk+c41SSwz3Nkt2MD8EVrUElLYEB3kGxeD1NvwvmwguxEy2jtkJY:889G5AvkbzMDvlMO4DLQ1xojAEQ7efso

Entry address:

0x491E04

Entry point:

55, 8B, EC, 83, C4, E0, 33, C0, 89, 45, E0, 89, 45, EC, 89, 45, E4, 89, 45, E8, B8, 0C, 22, 88, 00, E8, 26, A7, B7, FF, 33, C0, 55, 68, 32, 20, 89, 00, 64, FF, 30, 64, 89, 20, E8, FF, 2D, B7, FF, 85, C0, 7E, 47, 8D, 55, E8, B8, 01, 00, 00, 00, E8, 4E, 2E, B7, FF, 8B, 45, E8, 8D, 55, EC, E8, 9B, 5F, B8, FF, 8B, 45, EC, 50, 8D, 55, E4, B8, 4C, 20, 89, 00, E8, 8A, 5F, B8, FF, 8B, 45, E4, 5A, E8, 89, 72, B7, FF, 85, C0, 7E, 11, BA, 90, FE, 8A, 00, B8, 01, 00, 00, 00, E8, 16, 2E, B7, FF, EB, 0C, B8, 90, FE, 8A... 
[+]

Entropy:

6.7669

Developed / compiled with:

Microsoft Visual C++

Code size:

4.6 MB (4,787,200 bytes)

Remove perfectoptimizer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.