home

yet_another_cleaner_sk_0.exe

Setup

Elex do Brasil Participações Ltda

The application yet_another_cleaner_sk_0.exe by Elex do Brasil Participaçõesa has been detected as a potentially unwanted program by 4 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from www.yac.mx and multiple other hosts.
Publisher:
Elex do Brasil Participações Ltda  (signed and verified)

Product:
Setup

Version:
1.0.180.27427

MD5:
480219811748d7a4a34109c431394bab

SHA-1:
13cfea330f1f43599adc7f2433e078002b0d4ac6

SHA-256:
91db473fd340cb20fc9100b4bd3564be4db54867d04569e4d8f9d9599a818482

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
5/9/2024 10:25:02 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.6979

Dr.Web
Adware.Mutabaha.456
9.0.1.0181

Malwarebytes
PUP.Optional.ELEX
v2015.06.30.04

Reason Heuristics
Win32.Generic.ELEX.Installer.Meta
15.6.30.4

File size:
847.3 KB (867,672 bytes)

Product version:
1.0.180.27427

Copyright:
Copyright (c) 2011-2015 Elex do Brasil Participações Ltda

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\yet_another_cleaner_sk_0.exe

Digital Signature
Signed by:
Elex do Brasil Participações Ltda

Authority:
VeriSign, Inc.

Valid from:
4/12/2015 8:00:00 PM

Valid to:
7/12/2017 7:59:59 PM

Subject:
CN=Elex do Brasil Participações Ltda, O=Elex do Brasil Participações Ltda, L=Sao Paulo, S=Consolacao, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0671EE526ACB6F9BE201F5A8E203C41C

File PE Metadata
Compilation timestamp:
6/29/2015 6:36:57 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:1tkL4Z5+BkNFFAJMMpCctUlX5ZufDIqvGrROKVdLlt1F3l4uDzEwf1nPI25:LM04JDvMvufDIqvGrR5RXwebf1nZ5

Entry address:
0xA008

Entry point:
E8, 41, 40, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 15, 88, 70, 41, 00, 6A, 01, A3, AC, FE, 41, 00, E8, 2C, 45, 00, 00, FF, 75, 08, E8, C1, 44, 00, 00, 83, 3D, AC, FE, 41, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 12, 45, 00, 00, 59, 68, 09, 04, 00, C0, E8, 8F, 44, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 11, 70, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, 90, FC, 41, 00, 89, 0D, 8C, FC, 41, 00, 89, 15, 88, FC, 41, 00, 89, 1D, 84, FC, 41, 00, 89, 35, 80, FC, 41, 00, 89, 3D, 7C...
 
[+]

Code size:
87 KB (89,088 bytes)

The file yet_another_cleaner_sk_0.exe has been seen being distributed by the following 50 URLs.

http://www.yac.mx/.../112047

http://www.yac.mx/.../117122

http://lb.cdn.m6web.fr/d/c/a/fe71650e3520a4f988ccaab7cf658c0e/579f4c51/soft/.../yac-yet-another-cleaner_6-6-206_fr_431165.exe

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=8c898c1d2f197c6aae5726d9fad46123&upv=c8833fe607caa12b02aed61a0c816827&z=results&sk=0&abp=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE23C8594D788EE802BF1345B03D32F8EBEFE3BD251B8560965B86C4B9807AB721E981664C71BB0A799490F881AC7390649B0D76C874410FA925028BE22A61B03FFCA26A6074EA0FC63DAD707A4E31A8051AAE74C960982DC845343DDA26621422CA5B7DA7C67126899016B041E1B3081EA59072DAC45545253371F624C283941214C209A127CB590E51F187739A33F9AC91&h=235F9895C9D523D2BD3A3AD931360671DB25E361D1A1CBA90F4848F1C351F191&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.yac.mx/.../7935892

http://www.yac.mx/.../7288165

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=c8123b88c5f80aa1d5d03c891ac333c9&upv=d24f60b357b2a1d6eb004ebf6cb5b350&z=results&sk=0&abp=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE23C8594D788EE802BF1345B03D32F8EBEF460A8CD5C8723A7CA7FBBA1CBEC7E060F50C69F11F06B76341185F3A59F96D835B6DDAC80FEE00C08C6C6E424C3669B13FC3EFCBF4AC7B801EF28CB22545D55D14AB1FBC82B28B5E96293B2C5F1ACA7A6E13D2977105CF472569AC55581AF7099E1B4BD344C6EE06D6D3DC8F3A86FEA5390F6BAA2368167F2E6B406CE9882557&h=11278A60C396F0FBB8F72F51CBB0489F932EC4D8666E216705B80DCD9EC27A9F&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://global-shared-files-lw.softonic.com/13c/fea/.../yet_another_cleaner_sfto.exe

http://www.yac.mx/.../50789

http://www.yac.mx/.../6126121

http://www.yac.mx/.../4267358

http://www.yac.mx/.../7680690

http://www.yac.mx/.../100522

http://www.yac.mx/.../7125692

http://www.yac.mx/.../75178

http://lb.cdn.m6web.fr/d/c/a/44a3222b591f458d7f7038daf227d231/575db06d/soft/.../yac-yet-another-cleaner_6-6-206_fr_431165.exe

http://www.yac.mx/.../2053319

http://en.softonic.com/sads/tracker.php?ev=c&co=IT&sid=9c9f471d3c9a164b008c0739ab1b329d&upv=c3f32e63ce86214533e869fad67631f1&z=results&sk=0&abp=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE77E3734121724324D5A74197D8EE1DC864A0F81D8169024E06EB0ACFFA8D68CF4988B8D0210F53559DE6283D00548176A139DF55B7D5F9A401AFFFB9808AD35A34B0DDD4FE933665987B13FF2B640EA11A3BA915A541FCC3E15FBC7A25208263DB41B4C2A789D9262343CF0A4023B25C1D233E00BC1D7157A978A08899A972A941F5FEAB33E47B8E6A03D551B16D2CB64&h=38AABBCE1505FC8425EC5C92A92BC2D0DFD5303C11B24B6FB06EA1722898B6A8&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.yac.mx/download/.../down.php?pt=ocm

http://www.yac.mx/.../3247513

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=4deeabd415213c393cbd8c9c7b9b78cf&upv=c90c8db61d149231cdecde01e4267376&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE237E8B55F716ADC97C70D5F4DB55B100F5959C9F7BBC6266E2ED40D8E7A7F3945080BDD09C71C4C6BB29E0E389E2639E5DC83598062969E9152662AD2634ED91EA1CD17B0FE5C34D463DDB4E53A8000FA0EC9E3F3E499FAB876A1C1A378CC6CE273D3FBCC5D12FAF9F497CFDB461D0AE7D8A74671C9F4B5E9D52D9BE6B1DAD766B55C3361DF0D3F9907C7A7E284FC3ECBA&h=81B621653802D480706F48FAD17342A44B7FB210F22698B37A42759D0C10CC70&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.yac.mx/.../7900016

http://www.yac.mx/.../7139914

http://www.yac.mx/.../7546482

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=869918db2efd4d9da85cee3e5a0615dd&upv=cb8d4ede902dc2b4b95675564ad5c78b&z=results&sk=0&abp=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBAC9B15663BFCC32A4B420C96190DC24F2C4EC6E561351677C77086EC499320CAC6DE1CF0D9F763E59D3E5A975C1F426B6F2B49804694CB464F34F807D4129B3FB956391349DEB109039210178C85D8545FFF43FF040085E3350F2A2D81B1B42B24E79AA687DAE0FC7FF6CBF27581D981B1ABD7872D3DB3FCEBA035432F96D27F2137E0AB7121028A4F523D4034FFD31F169541FC7094D684B4889F035845D7D46&h=B6ABA4DFF9CD5A7D93312B0B1D77468AF1EA153CB6C6B4653802F50DF3CCBCDB&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://dl.yac-tech.com/download/.../yet_another_cleaner_ocm.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=92fdc24558c0719b293713d4727f5434&upv=b36e5fa7d9cd6cf092a185b927bc9e2c&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE77E3734121724324D5A74197D8EE1DC8626A0B89D171841918AFECAC818162020D5ADCFBF2EDE960D788532C3A8ADCFFC3E7C909834CA313AE865AF539DD5BF205279C8ED32DA5C4E9DC41789528DCB2E017A97B4989B4C7AF8A45F0DF6E665BFBBD9A31871381F207E7A66FD3122BB6BB1A78FB45197F9D55C7B07E147039E511A8390646E47DEEFA4EF184AA1206EC2&h=106620E98DF8B42AD9A3C096CD072FE628C5EC042357D21F9D2F9315CE5FEA7E&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://en.softonic.com/sads/tracker.php?ev=c&co=BR&sid=9008a89fe8efe07e8898255170b1af28&upv=60191d814a6ed8e3cc9c508e40e79362&z=results&sk=0&abt=&eid=&params=F39B2A32BFC101987B1458170C278E0313858C8F8C1052086E0A941149460CE7F4DEC5201CDDA1FF79C5BBDC0F758051A1CF9390E90DD6B08B2F16DAF5107238B43F366E0DBF52F6A735D1FFCA6E3B7DF746A39239B05A623EF76BEAF649992248E615A6624A687F86C241946C7434FDDD62881C8950211934865B0F6FDC0A23870B103506FD0763AAE40876743C7973B77B4D536C15D553649722D64F9FE7CCDF3447E7DF441E670CDD4C317E9BF94B&h=4172F82671E27C9A9AF421149EB94A70F8941C75AA8AB99CB5E5C9AC7C0BC55F&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://www.softonic.it/sads/tracker.php?ev=c&co=IT&sid=4138e510a2a2aa727f4de7583acebf93&upv=a5d101932a8e7a2ba25095d6857c9e4a&z=results&sk=0&abt=&eid=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBADD0CB244B8D47EE8EF2B6FDF0EA0CE23C8594D788EE802BF1345B03D32F8EBEF6DD2F2D3DE487748BEC7794C220647AB37A7863D356E29E653A2B382789C786B55EBFA0D8D02B540AA7F387A194C5AFD4C757A1FD996ED375506B77E9D7260BE78CC3629CDAC8A78748CF42FD450DE7A86FCC0A4A9B401251B2F4EE42F556DBC50DE5E9857253900708E26851A2A0339&h=8010FE5485BA9F034AE0FAA89894C67622CA7B47841D9AD97C5B631DC34CFE2E&directdownload=1&f=69665508&d=http://www.yac-tech.com/download/.../down.php?pt=sftc

http://dl.yac-tech.mx/download/.../yet_another_cleaner_sk_1932439.exe

Latest 30 of 55 download URLs

Remove yet_another_cleaner_sk_0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.