home

yet_another_cleaner_nee.exe

YAC Security Protection

Elex do Brasil Participações Ltda

The application yet_another_cleaner_nee.exe by Elex do Brasil Participaçõesa has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
Elex do Brasil Participações Ltda  (signed and verified)

Product:
YAC Security Protection

Description:
Setup

Version:
5.6.100.18835

MD5:
9ac60b80a7e3a3ca1ee1e808065632a8

SHA-1:
e46b1fcc15456aeb6492356c5d638aaa7f23b12d

SHA-256:
c4fd2d313f0d1f4a2cd570354b93103e7629b70a52e1a202bb9f1a6312a2f188

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 1:31:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Installer.X
14.11.17.19

File size:
14.6 MB (15,258,800 bytes)

Product version:
5.6.100.18835

Copyright:
Copyright (c) 2011-2014 Elex do Brasil Participações Ltda

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Elex do Brasil Participações Ltda

Authority:
VeriSign, Inc.

Valid from:
6/23/2014 2:00:00 AM

Valid to:
6/21/2015 1:59:59 AM

Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=São Paulo, S=São Paulo, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5C6950D0A05A1CD63164D1E1EB1FFB8A

File PE Metadata
Compilation timestamp:
11/17/2014 8:46:38 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:VWeS4meY7o/irhMmCA9aR5854yZyK0VqC:c4meY7Ltj1wIjobQC

Entry address:
0x3F292

Entry point:
E8, 9E, 1A, 01, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, 3C, F5, 70, 19, 48, 00, 00, 75, 13, 56, E8, 91, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 11, E8, AD, 88, 00, 00, 59, FF, 34, F5, 70, 19, 48, 00, FF, 15, 94, D1, 46, 00, 5E, 5D, C3, E8, 3E, 29, 00, 00, 85, C0, 75, 0B, FF, 74, 24, 04, 50, FF, 15, 50, D2, 46, 00, 68, FF, 00, 00, 00, E8, 58, 87, 00, 00, 59, C3, 56, 57, BE, 70, 19, 48, 00, 8B, FE, 53, 8B, 1F, 85, DB, 74, 17, 83, 7F, 04, 01, 74, 11, 53, FF, 15, A4, D0, 46, 00, 53, E8, 8F, BE, FF...
 
[+]

Code size:
431.5 KB (441,856 bytes)

The file yet_another_cleaner_nee.exe has been seen being distributed by the following 6 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=cd52b752b33385180a9335173d5dec5e&upv=306be0be29121a6bd137827296ef313a&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACD5021AB3672758348078DBC31F8467FDB310D52CC97BB8B87CD32564B6F1E206CBCB6AE03A81379C5F5065BCF515F0C9C4FC00A9CCA9E706EE2F73CAE3A2E34E532FB1382D49A5A1539D6501EE347B84972FE2347401B89496CDAE9D6E1F5194E5B2CC65E9BA3911F072406377C65954774FD4B3E92F173B8A6DF8C376D24619&h=C56D3F38C471516BAF289CC07C26A4D0EFB962DCB92A930BC7643AE6170A7266&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://t2.softonicads.com/tracker.php?ev=c&co=US&sid=e5907f0d516e556a94d3ea59812b5970&upv=aaf801cf65ff6bc69ee66ff352c48953&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACE4DB3AEF78AB85E9B02D1644D16A523DCD08F697E7BCD12891A1523265C9436F7D91B729F1593D8C034C532E6F623D2AFA8CADF97BF28762B024D1D0E1841B5F303C82495A8C9CEB8AA6FA6B15677FE2BBD7973D7D46C611771077C965CD3B7EA337A1B4EBAE00CF6B0E02B22CC4385588B4CF975AAB5E1591B02651FC8D1DAC&h=A6A7C8EBA53321D3893B71B0EE92181A298F27747930C25B40FD249B9FA8CA87&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=US&sid=e5907f0d516e556a94d3ea59812b5970&upv=aaf801cf65ff6bc69ee66ff352c48953&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACE4DB3AEF78AB85E9B02D1644D16A523DCD08F697E7BCD12891A1523265C9436F7D91B729F1593D8C034C532E6F623D2AFA8CADF97BF28762B024D1D0E1841B5F303C82495A8C9CEB8AA6FA6B15677FE2BBD7973D7D46C611771077C965CD3B7EA337A1B4EBAE00CF6B0E02B22CC4385588B4CF975AAB5E1591B02651FC8D1DAC&h=A6A7C8EBA53321D3893B71B0EE92181A298F27747930C25B40FD249B9FA8CA87&directdownload=1&f=69665508&d=http://dl.yac.mx/download/.../yet_another_cleaner_sftc.exe

http://www.yac.mx/.../31259

http://www.yac.mx/download/.../down.php?pt=nee

Remove yet_another_cleaner_nee.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.