home

yet_another_cleaner_nee.exe

YAC Security Protection

Elex do Brasil Participações Ltda

The application yet_another_cleaner_nee.exe by Elex do Brasil Participaçõesa has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from mmtrkjy.com and multiple other hosts.
Publisher:
Elex do Brasil Participações Ltda  (signed and verified)

Product:
YAC Security Protection

Description:
Setup

Version:
6.0.161.22853

MD5:
a822b434ddc6e3a716b6ba59dfe2513f

SHA-1:
6b8aa50918be37934ac034d2501b6e12ce4876f9

SHA-256:
8c6295ab7229e6c5faa76f002036e42c4cb9ee907cca7007e1666c0738f54bb4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/23/2024 7:31:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Installer.ELEX
15.2.21.6

File size:
15.7 MB (16,473,152 bytes)

Product version:
6.0.161.22853

Copyright:
Copyright (c) 2011-2014 Elex do Brasil Participações Ltda

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Elex do Brasil Participações Ltda

Authority:
VeriSign, Inc.

Valid from:
6/23/2014 3:00:00 AM

Valid to:
6/21/2015 2:59:59 AM

Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=São Paulo, S=São Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5C6950D0A05A1CD63164D1E1EB1FFB8A

File PE Metadata
Compilation timestamp:
2/12/2015 11:52:58 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:qwwYrV25dAqRthIUrSTU+Wjv1pT/ABsN0+IJghOdX:z5mAqdrZv1xAxpJpp

Entry address:
0x3F7C2

Entry point:
E8, 9E, 1A, 01, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, 3C, F5, 90, 29, 48, 00, 00, 75, 13, 56, E8, 91, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 11, E8, B0, 88, 00, 00, 59, FF, 34, F5, 90, 29, 48, 00, FF, 15, 78, E0, 46, 00, 5E, 5D, C3, E8, 41, 29, 00, 00, 85, C0, 75, 0B, FF, 74, 24, 04, 50, FF, 15, 5C, E2, 46, 00, 68, FF, 00, 00, 00, E8, 58, 87, 00, 00, 59, C3, 56, 57, BE, 90, 29, 48, 00, 8B, FE, 53, 8B, 1F, 85, DB, 74, 17, 83, 7F, 04, 01, 74, 11, 53, FF, 15, AC, E0, 46, 00, 53, E8, 8F, BE, FF...
 
[+]

Code size:
433 KB (443,392 bytes)

The file yet_another_cleaner_nee.exe has been seen being distributed by the following 22 URLs.

http://mmtrkjy.com/mt/.../&subid1=u5d47fe74549d9a3d67bbc2bbf6

http://www.yac.mx/download/.../down.php?pt=munbd

http://mmtrkjy.com/mt/.../&subid1=u44bf9dee54ac78752c8aca6d9d

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=500692fe2cc466cc08f7fc3757ea1d16&upv=5eaf8c4243aa3ca293c5c3289595784f&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACD5021AB3672758348078DBC31F8467FD710464AA1BE844A83576161450BDC5BD228E4861AC46EF5F914B28C8FC09A4772AA2FC5F5063DAB63C01D57FEDABA3097AA62338772E876F8A4532A6D4C8E15E7A600658D1C7E57B1591F4F268A49F2A12553F265695499DFE8A93F3B4A4A7BB1473DCA57FF366FEF81F88CF7D68C0C1&h=A8BA401739BEE519D6C95A7AFF91A54EDF6F539DF47DD3572DB100C33CE28338&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://mmtrkjy.com/mt/.../&subid1=33847853161424146312

http://mmtrkjy.com/mt/.../&subid1=15435970661424668363

http://mmtrkjy.com/mt/.../&subid1=u53c25e27543a7c729bc078e20

http://mmtrkjy.com/mt/.../&subid1=18406453491424533466

http://dl.yac.mx/download/.../yet_another_cleaner_sfto.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=1f6455430efed0491c30e06003c875c5&upv=16c86fb354273c420d609e227fad19d5&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CAC3CA5E7EB440B9F07FCB18AD5BF214204C928115CED1814963D5F04BB0E0A5F70CB805F124E203DD4B267FC5F763B1323B59DB6FF647F6267DDF8BE1A8E6AFCE36A6881F7D45B664ED64D6E4F173F9E82908F91038D226D77A189D3AB468D1A6E6922F03108F760C5BE684547E9CDD667257C8DB6B1CB9FD21F8124312008B0DA&h=963A60FAAFBBDC68F81D5671945B0C007406273FB9F81FD758FCDAC90FEF201E&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://mmtrkjy.com/mt/.../&subid1=13172528661424876612

http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=df942f642137490fa274a257ab1b6754&upv=9ed2df061fe447c69e0fd1406d6464dc&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE237E8B55F716ADC97C70D5F4DB55B100F55CD1419BD670ED9F96DB57BDF7AEC5E8D84C2BF113C7E4061CED9E40555BF0E6DFB00D1A2AAD9CBC3DC89A18605477BBE76C80AF155695701BAFA4AB93A22D67FB5EC9D4ECDD87CABAB41486FEDDEAD230B14186A4CB2E4E7FB4D64E38E96AF03D698E9DFF81558C0957DB06E7950EFBE6FA59D049265B3956B1FA9D1C33FD39&h=7BEB7ADCA34F761DFEC7F1E32D81EDB16B5C55A7B4DE8C9BEE7065FAFC0EECD4&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://mmtrkjy.com/mt/.../&subid1=29966982481424721143

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=a0e3a521ecbc6f6de97075df8e00eaeb&upv=7eadbf7c5836e62ab1090b655ebbde13&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACFE41568A4135AF1DB6E7DB9A5E6F6B9D2CE04D1A3AF04A57729AD620B73DFC62FAB88546BDB978A637E85DB9F56DEA6D2FEAE3C36F5E780CE9792187E077FD387F92A785AC2F49DCD685F1A0041A1D76DDB738D9BAA415A838B9605E57CDC89472FEC4B21A49569C783E6A82C00A7F72D48A7CCCE157734A3D0F43CAE53E9EEA&h=AA88D30101A18344AEC63B218F9D6716D63B1BB5FBFB79A7C2FA4BCCF2CD97C2&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://mmtrkjy.com/mt/.../&subid1=u506d9e0c548b6a255d29628664

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=1953073e12c362e3f48c632119154764&upv=eeab4716612407a790f86c9d853cd8cc&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE237E8B55F716ADC97C70D5F4DB55B100F5E3EB6AE67E6FD0DED5362F26B087934603452890B0F6F179CA25C3CD2EF2C1FFAE2058C70B5EC489DC91E6262A2C272C086D55F010C7519DB1D7FC3CCA50E537D74232B04B8349FD5A46A0281186ADAC48F65AAEE29A0C53B71D5873F7E5421B9C8D150E8C3777ECAB65B4AD276FF851BE5B34A958229DF4BBDC8087520E9BAD&h=065BE67F4B5BA4B22035E1CDE388CE4F3E306A41091410F24979F4D70E7D033D&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://mmtrkjy.com/mt/.../&subid1=31066746931423990779

http://dl2.yac.mx/download/.../yet_another_cleaner_nee.exe

http://www.yac.mx/download/.../down.php?pt=nee

http://dl2.yac.mx/download/.../yet_another_cleaner_munbd.exe

http://mmtrkjy.com/mt/.../&subid1=ADSP-US&subid2=459&subid3=28222&subid4=Chrome&subid5=263233

Remove yet_another_cleaner_nee.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.