home

UltimatePCOptimizer.exe

UltimatePCOptimizer

EuroTrade Ltd

The application UltimatePCOptimizer.exe, “Ultimate PC Optimizer” by EuroTrade has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Ultimate PC Optimizer by ATSH Ltd. While running, it connects to the Internet address katom.spd.co.il on port 80 using the HTTP protocol.
Publisher:
ATSH Ltd  (signed by EuroTrade Ltd)

Product:
UltimatePCOptimizer

Description:
Ultimate PC Optimizer

Version:
2.5.9.0

MD5:
c9ce3b4c1b7e8481af61700147bb2b47

SHA-1:
f3bc8d712ed2a7f7ab3cabeb7b6dca862c426bea

SHA-256:
b0b69dd449d60ff9ba4b58ff9968d7c8b96c9fb1eed39aa1232434d7920580ed

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/7/2024 6:00:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.EuroTrade.RegClean.Optional.Meta (L)
15.8.26.16

File size:
5.2 MB (5,401,664 bytes)

Product version:
2.5.9.0

Copyright:
Copyright © 2014

Original file name:
UltimatePCOptimizer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\atsh ltd\ultimate pc optimizer 2.5.9\install\932a8a6\ultimatepcoptimizer.exe

Digital Signature
Signed by:
EuroTrade Ltd

Authority:
COMODO CA Limited

Valid from:
11/3/2014 1:00:00 AM

Valid to:
11/4/2015 12:59:59 AM

Subject:
CN=EuroTrade Ltd, O=EuroTrade Ltd, STREET=Izik Shtern 1, L=Tel Aviv, S=Hamerkaz, PostalCode=62153, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009B1A22ADB93727A6986684C4D58CF9BC

File PE Metadata
Compilation timestamp:
11/24/2014 12:13:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:DKTN4IJmvRcie57Lqt/TEpQ50npq7bwKFKhUJkV:GahR/exZvnp6bwKFKhUJe

Entry address:
0x515792

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 51, 00, 0C, 00, 00, 00, 94, 37, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5.1 MB (5,322,752 bytes)

The file UltimatePCOptimizer.exe has been discovered within the following program.

Ultimate PC Optimizer  by ATSH Ltd
About 4% of users remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to s1.7500.biz  (37.187.171.44:80)

TCP (HTTP):
Connects to katom.spd.co.il  (163.172.53.245:80)

Remove UltimatePCOptimizer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.