superoptimizer.exe

Super Optimizer

Super PC Tools Limited

The application superoptimizer.exe, “Fix PC problems and optimize performance” by Super PC Tools Limited has been detected as a potentially unwanted program by 33 anti-malware scanners. This is a setup program which is used to install the application. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from i.verrsin.net.
Publisher:
Super PC Tools Ltd  (signed by Super PC Tools Limited)

Product:
Super Optimizer

Description:
Fix PC problems and optimize performance

Version:
3.2.0.0

MD5:
b13cf885be5417cc5ecf069a90a0062c

SHA-1:
0b595c60554c96e18dff52f1ed8842a7fb668a5b

SHA-256:
2a666932c142061841d9a64a0d96f58aad745569ced01854dbb3e12e2e388927

Scanner detections:
33 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 12:14:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Strictor.62009
371

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.OptimizerPro
2015.03.22

Avira AntiVirus
Adware/SpdUpMyPC.A
7.11.200.132

avast!
Adware-gen [Adw]
2014.9-160130

AVG
Adware Generic5
2017.0.2849

Baidu Antivirus
Adware.Win32.SpeedingUpMyPC
4.0.3.16130

Bitdefender
Application.Generic.1026423
1.0.20.150

Bkav FE
W32.HfsAdware
1.3.0.6379

Clam AntiVirus
Win.Adware.Agent-7758
0.98/19362

Comodo Security
ApplicUnwnt
20663

Dr.Web
Trojan.NtRootKit.17923
9.0.1.030

Emsisoft Anti-Malware
Gen:Variant.Strictor.62009
8.16.01.30.10

ESET NOD32
Win32/Adware.SpeedingUpMyPC.T.gen application
10.7.0.302.0

Fortinet FortiGate
Riskware/SpeedingUpMyPC
1/30/2016

F-Secure
Gen:Variant.Strictor.62009
11.2016-30-01_7

G Data
Gen:Variant.Strictor.62009
16.1.24

IKARUS anti.virus
PUA.SpeedingUpMyPC
t3scan.1.8.6.0

K7 AntiVirus
Adware
13.193.14891

Malwarebytes
PUP.Optional.SuperOptimizer.A
v2016.01.30.10

McAfee
Artemis!861F50D379C0
5600.6505

MicroWorld eScan
Application.Generic.1026423
17.0.0.90

NANO AntiVirus
Riskware.Win32.OptimizerPro.dioyqs
0.30.0.64448

Panda Antivirus
Trj/Genetic.gen
16.01.30.10

Qihoo 360 Security
Win32/Virus.Adware.65c
1.0.0.1015

Reason Heuristics
PUP.PC Utilities.SuperPCTools (M)
16.1.30.10

Rising Antivirus
PE:Trojan.Win32.Generic.17289739!388536121
23.00.65.16128

Sophos
Generic PUA EG
4.98

Trend Micro House Call
TROJ_GEN.R08NC0OA815
7.2.30

Trend Micro
TROJ_GEN.R08NC0OA815
10.465.30

Vba32 AntiVirus
Trojan.Inject
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
36538

Zillya! Antivirus
Adware.SpeedingUpMyPC.Win32.3
2.0.0.2031

File size:
8.5 MB (8,945,168 bytes)

Product version:
3.2

Copyright:
Super PC Tools Ltd

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\superoptimizer.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
10/1/2014 5:00:00 PM

Valid to:
10/2/2015 4:59:59 PM

Subject:
CN=Super PC Tools Limited, OU=IT Department, O=Super PC Tools Limited, STREET="89 New Bond Street, 5th Floor", STREET="London, W1S 1DA", L=London, S=England, PostalCode=W1S 1DA, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00CA73A5DDD6C71D2B28C506871B30F3D2

File PE Metadata
Compilation timestamp:
12/15/2014 1:12:02 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:MOXzXZZ89pr+VuBDmIRGbOhj1UYEwXWmR39JsWNW/y9+ot7+:MOjwr+goKjUYESVrsWA/y9zQ

Entry address:
0xA7C58

Entry point:
55, 8B, EC, 83, C4, F0, B8, E0, 1C, 4A, 00, E8, A8, 23, F6, FF, E8, 13, E2, F5, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8363

Developed / compiled with:
Microsoft Visual C++

Code size:
666 KB (681,984 bytes)

The file superoptimizer.exe has been seen being distributed by the following URL.

Remove superoptimizer.exe - Powered by Reason Core Security