home

yet_another_cleaner_sftc.exe

Setup

Elex do Brasil Participações Ltda

The file yet_another_cleaner_sftc.exe has been detected as potentially unwanted by 1 anti-virus scanner. The file has been seen being downloaded from cjsab.com and multiple other hosts.
Publisher:
Elex do Brasil Participações Ltda  (signed and verified)

Product:
Setup

Version:
6.8.15.29832

MD5:
3aafe6796dac4550372a501377f32443

SHA-1:
1a4190558434a4c60436573c2ddf00e74dc0eef0

SHA-256:
836f585a334cacca120b6852f40d4c2d15247963ca58f46c8de1c3ebdd230dd4

Scanner detections:
1 / 68

Status:
Potentially Unwanted

Analysis date:
4/19/2024 1:52:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
15.12.30.8

File size:
853 KB (873,488 bytes)

Product version:
6.8.15.29832

Copyright:
Copyright (c) 2011-2015 Elex do Brasil Participações Ltda

Original file name:
setup.exe

Language:
Chinese

Common path:
C:\users\{user}\downloads\yet_another_cleaner_sftc.exe.r6v1hd6.partial

Digital Signature
Signed by:
Elex do Brasil Participações Ltda

Authority:
VeriSign, Inc.

Valid from:
4/12/2015 8:00:00 PM

Valid to:
7/12/2017 7:59:59 PM

Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=Sao Paulo, S=Consolacao, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0671EE526ACB6F9BE201F5A8E203C41C

File PE Metadata
Compilation timestamp:
12/22/2015 12:10:18 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:Xr0Xx+T23oXzW3PsxSADDeHX2WKZaT3Ip3+j/TGsOdFWo8y3QLcmlV5+NkX2TN5:btT20zW/hEDeHe0G+PVyVmlV5+NaS

Entry address:
0x9EB2

Entry point:
E8, D1, 31, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 15, 6C, 20, 41, 00, 6A, 01, A3, C4, A7, 41, 00, E8, 8E, 36, 00, 00, FF, 75, 08, E8, 23, 36, 00, 00, 83, 3D, C4, A7, 41, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 74, 36, 00, 00, 59, 68, 09, 04, 00, C0, E8, F1, 35, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 99, 5E, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, A8, A5, 41, 00, 89, 0D, A4, A5, 41, 00, 89, 15, A0, A5, 41, 00, 89, 1D, 9C, A5, 41, 00, 89, 35, 98, A5, 41, 00, 89, 3D, 94...
 
[+]

Code size:
64.5 KB (66,048 bytes)

The file yet_another_cleaner_sftc.exe has been seen being distributed by the following 35 URLs.

http://cjsab.com/?a=506202&c=1419483&m=28&s1=18596&s2=308967f0cf3fbd8f5d703191c2a8a702

http://cjsab.com/?a=506202&c=1419483&m=28&s1=18596&s2=3d5c2bc0b7a3c01df718794e3a4605b6

http://cjsab.com/?a=506202&c=1419483&m=28&s1=25684&s2=3719466dd1179d46662d28f2dae4e03c

http://dl2.yac.mx/download/.../yet_another_cleaner_bxk.exe

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5619907214.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=73d162b28c30ed613e1044e212919c7a&upv=3d571f0bd233fec3cf05b2345b4e86c0&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE7F4DEC5201CDDA1FF79C5BBDC0F758051FD452C04D029A2D5FDBC8CA08A8851499C6DE2F41999F07FB34B0D2D554FF125187482B88F55B4B1C215C4F6CBD219E3D38D8133535F681BDB4B34F8E803E96030ED991864E93BF6DE130B8EDC36B4CC9BBE09F4D3D301602C776CA30780812449722456DD9526F79692141D25B17813FC2CFCF500A80960E0CC45356388AF4B&h=12F5AD301E12A77E56FC7F6B1AE736E2FA13EB72ED0B8228168CEBAD3835E5D0&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5635868069.exe

http://www.yac.mx/download/.../down.php?pt=brob

http://cjsab.com/?a=506202&c=1419483&m=28&s1=18596&s2=194874473fbde664bf0d940217be2a73

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=db67be7062293a4e9a02b45c5909da42&upv=5dca2a95e1d643c96e93eb32fc598ba9&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE77E3734121724324D5A74197D8EE1DC869C6CA9EEC8B565EB8395667EE7CDEF7A419DC65C8A85973F0492744EA03263513B38D8E44DB6B90F946F2E0DD7CEB40735D442B372FECC38748A7DCC670EC3B5762DF109178E66D78FED2D66ED2AD35B33F37EB477BB82AE46E710AC99A0D6A232CF0C4B48D009F875D99AA5F1364DAAA229AEC4EDAAC2BD4CA9ACB4A6D3B03A&h=9770842B004585332D2A6D0E66E77370DDFF159617CD1B3E7259C12A54A5C2BA&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://cjsab.com/?a=506202&c=1419483&m=28&s1=18596&s2=5ae40b88b9ce9207f47dece8e6f26cde

http://dl.yac.mx/download/.../yet_another_cleaner_pado.exe

http://cjsab.com/?a=506202&c=1419483&m=28&s1=18228&s2=715606d96281bbc1cd111cc70b00e729

http://cjsab.com/?a=506202&c=1419483&m=28&s1=32229&s2=42b2f10975f31b182f9e5ba259f7e841

http://s2s.yac.mx/ads/adsavess?sid=yac&ptid=nvbc&subid=5619671480&lplink=http://www.yac-tech.com/download/.../down.php?pt=nvbc

http://cjsab.com/?a=506202&c=1419483&m=28&s1=25684&s2=e650c337df706f945dd23a9f1e917965

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5615573747.exe

http://www.yac.mx/download/.../down.php?pt=munb&subid=

http://dl.yac-tech.com/download/.../yet_another_cleaner_spl.exe

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5639587689.exe

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5615600824.exe

http://cjsab.com/?a=506202&c=1419483&m=28&s1=32229&s2=cd819913962e8b9190244b3f32d0a9f5

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&upv=c8bfcfcdcf7dc8b5b93484c218778a35&z=results&sk=0&abp=1&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE77E3734121724324D5A74197D8EE1DC8641ADA0F653BA58418763EB20607248E668710D1CDD7DD0B9E10E7B6197593014351D7EA14AD545C25CD5E26295E42688D6393EABA2BAE009AB44489222D820FA05460625A20691825420B2F797E2F5B1DD222929070027555893E5029CDFCD0A36B576D3252047FDF3F4C945B8ABD957&h=D6E66A3E2A3D3D7D65DCDDA1EAC5AA1D5175CCF0CA455331F4333F4687A7C727&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.softonic.com/sads/tracker.php?ev=c&co=BR&sid=361e45d8393c4e2663627e4139dd210d&upv=3b48603d7298b7082cbaf24279360c8d&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CACA7339A7C223B1688BED157972DF339B437B44F0718138EE7DE0355ED4BACD6E47657EC6E1913533166D10D658B49B0CC1BC8835150F17E78AD324468283EDD63E2F7C430A12F62FD205B2ACCCE185EBC35079160EA2CDB8B7D8559F1FCD57E6ECD8494412C645B4BF043A5FFD8BE8B92BCA3731226902C42484655257CDA7312&h=BC5D4F9244782B861110A76F9E4EE6FAA76C260904F253229668F6B3C45748A0&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://dl.yac-tech.com/download/.../yet_another_cleaner_nvbc_setup_5639618222.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=2d93d9bb6429b0ad8b2c8253bc8657f9&upv=a49cc42357143ec9af03ab3dac55c6a1&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE237E8B55F716ADC97C70D5F4DB55B100F5D260BCA0797A9B4A8BABBEF3BA8DD0DADDE9D4FC6274F12A163DAD514E1E287554D1A7DF9BD7BDB97EF0096FBAF303BD69A362F65EB0EBE87168445BA1BFDEE9F4E1AEA4081E875F34B169FCB951FFD13169C428C8251140EB88AF6F6F2E3691F6012046EC96203B852CE083BFC39F2F&h=9D7D855D2DE68DC14C7A3627F14075FE8F0DD158A4887E471E7E2643AEBBFCF3&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://cjsab.com/?a=506202&c=1419483&m=28&s1=17916&s2=2d7d3f1c05ae262f2eae0a5ffd91df0d

http://dl.yac-tech.com/download/.../yet_another_cleaner_sftc.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=9cdddcc0eb9fa16da1476064d05ecf81&upv=231bc5004774eccadc2cb7843a03c58d&z=results&sk=0&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE23C8594D788EE802BF1345B03D32F8EBEF866A43DD42F9C7DEB82E861A6D6CD2A871C7C8ADA0735C305F9D487C074289AF63408843EB4EA7C394C5AF16304E727488173D4582203C2E624DF089C336F2F8306F0123B0DD04A6DF96AB81E5AF4ADE4D878543E7D818B640CAEE214809A644B05C2E24345D634622B8667DD5C9F029F098E24C89DF5D84F22468D9A59C2174&h=CA038FEB3F8CFFB4AACB3D36A4EB5DBF42DC9E9BE370DBA57F457EFDE4053B3A&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.2ktrack2.com/.../out.php

Latest 30 of 35 download URLs

Remove yet_another_cleaner_sftc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.