easycleaner_rus_setup.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
InstallShield Software Corporation

Product:
InstallShield (R)

Description:
Setup.exe

Version:
10.01.238

MD5:
578bf9c1228e3726d83a1631288e8d09

SHA-1:
57ca4fc0f80b11b391a16e299ca0e19e4264979e

SHA-256:
aae309572f16568075fb2389d2fe11e448af8cd904e15fa263cae72ea8a6548e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 5:15:35 PM UTC  (today)

File size:
2.8 MB (2,951,802 bytes)

Product version:
10.01

Copyright:
Copyright (C) 2004 InstallShield Software Corp.

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Common path:
C:\users\{user}\downloads\easycleaner_rus_setup.exe

File PE Metadata
Compilation timestamp:
7/16/2004 9:22:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:nTaXm+fseLXrg9hrddlUvmpLx/q2HIZboZcxh2w2kWXujxAmTa7FfRk:TaX5seLXs9hrddlwmpxAZbIUBN7a7Ffy

Entry address:
0xC816

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 50, 21, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 4C, 21, 41, 00, 8A, 06, 57, 8B, 3D, 80, 22, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 48, 21, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Packer / compiler:
InstallShield Custom

Code size:
65 KB (66,560 bytes)

The file easycleaner_rus_setup.exe has been discovered within the following programs.

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
EasyCleaner  by ToniArts
Publisher's description - “EasyCleaner is a small program that searches through Windows registry for entries that are pointing nowhere. EasyCleaner also lets you delete all kinds of unnecessary files like temps and backups.”
personal.inet.fi/business/toniarts
40% remove it
iTunes  by Apple Inc.
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad.
www.apple.com/itunes
9% remove it
 
Powered by Should I Remove It?

The file easycleaner_rus_setup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/57c/a4f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=14988&instance=softonic_es&type=PROGRAM&Expires=1478792742&Signature=Hx-BNMDtcOSnrz1gkAOb9LUHg-brCCi8r1siIl4mZjc1D2ci2fh4a0VfpVgbtBAK2uCED3N2ZZjT0abL2Sbzjg-0EWoy71n3QX1uzY~CpJTGDZhdFchN9sO62gGs2F7l1077ta~8DnMOlV8ZRxBm7ROsL9RfAAmQNS7EUNtYCU4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=EClea2_0.exe

http://telechargement1.pcastuces.com/.../EClea2_0.exe

http://gsf-cf.softonic.com/57c/a4f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=14988&instance=softonic_es&type=PROGRAM&Expires=1440430231&Signature=cxZg8t-~c9oE0GJr0vqLze7K1JfvsTweOLY6SuECKekNZjRpgshI-eFph1LOEJMnJF5axNioZliHSXLoG6Lbbe~snOv1WsP5b~TxQ02WG-3r7-UQgij49AXncZiwGbGAh7OFb9O7yh-v4GsD8skbaQrrw1PJEHvX482iWWZPYNw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=EClea2_0.exe

http://lb.cdn.m6web.fr/d/c/a/ec47e79fbd9d26ef7a3f6d881715a89c/558ad63f/soft/.../easycleaner_easycleaner_2.0.6.381_francais_11170.exe

http://gsf-cf.softonic.com/57c/a4f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=14988&instance=softonic_pl&type=PROGRAM&Expires=1473650043&Signature=IuG2wKAOCAn7SaVNEUNA56Y-tlA1St8~1OXhQjF0AjRWcOcbdlPOsU~2sDNbtV9uQIBYhOlom0wuC8ze1XKbjV0~G9a-o6NY2CbeDiAnnZAlru9LT1PzzkMYfPgeRNScc30BQlGeY5bF-vpoaDVdC9qUyRI85~cYm9wCz1YwW7I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=EClea2_0.exe

http://www.bytesendclear.com/C3fdY_neBMMips85xTC26suHyvtHPHeWoHNkeoKI6vDCfnt2gHCMRBmy5lx_OO4ksEfG3D9V51xdYeXDsZYhZb8GD3c8vJuBPtCmlwr0LFYoTcn0Frp8Uz83x kHITjEo 006HuZO93IbD7_aNVh67dJ8T1qUAbiTGNjoPZ mzgHst7IvJr0PGESezPYyL1XXxgF0SL8NcuXsaHVhq30JmAymJU1mFag3y7d omgpzTG7vdSxAw9k0_Ac1gg2ueKvi5f8L24uKPxxUhbjaLhRFavDcX_AYTnm5epKWFa0wscSqyKNUKdaFehJZGUnW0THv5xpOCa9al_XJxYFgeboQIn0jtsjsl527GYQ7XZ0F9P1KdOdnOkevGdaKf1WtCEWp1IdZISMBwrVqvTyGbMidvjD6bEuUraP tXL2cKxVhEmeJrIbh_VNuVxk0BncWEJ5nYnKGah18P6_qmMYOqcCJ3_ncGP6vL6fPLLxBlnTbgrtzWrvOndDvGDoJbD2HBzqR CVn9VCQC2A1s85GnEVLH2srdc65klxjxANMz3DnPSO8zPaX704iQOMZyKjDD8R0oMB4DTuwDNKkEc23OxtI03uyxQQzsFFQMkmfuynnu6TfvpCg=-G2YAAGRwXkxjaJdDHHQaJnLg0NIMDozvANtA3piigO4Frssu9NwNenH7B9cReYMyx7J3IqvF_hv9dwI16v OX_1i7kz4HcOFInF8wWjEbHZGUcRShqF5DQ==-E

http://www.bytesendclear.com/oC1gVhUSR3R7yZj3egyfHFYsEqjAYo_GHR0gNvikukGsw_o9O9kc2aqcFM67mvMM7PnSq_IuiCxA_iYw5KDq1MiXVBGbGVJ5b8Y1TXKd8gDo5YT12RK6Y8Sb1bve3__CNuPNmChnMWaHnFE1w6JgfCcgttOsXucVYthv_EZ9w9rde4h4lmlmmFnjA1SvDI_T0EhWPwJnbpabZu SIU2ZGapRBIdMAeeeTw2Mnsce_Fhu4rvrjvHX7Lx2Pq_rAqqwPcqQ7qkiGcdXyf6k4HcL4YJZJXSf8N7NpO4bYzYjdFTuIGsTRJx80vM9dtKaDrQiZS8IgxAZpjYgVFLqcpp930N8Li2WeEyyyVVXR3_nurjd3u0qHRJdbwsgrJXo6do9NHu2pKNM 6Wi5EFG4Wt1wD_VM6i9SSF6CoX4R2TGqdoGFWZRhM1PpSJaCsB5_We9ajU w856ePQimIf51GOeZmcf4HIJUsiKFEj2YMRJ7l56yzEwu3ijRqKY4EcTEJhAOx2RoR4Sgzs AyfBQVZBzkOdwj_lxBJq4jXf0ZEiEtUXP QT3NRobgYElfL_vyAwTOc4ZvrawhLVvXxV5CTstNX0QLA68Xefuk2ye4agOpDUWbsfoVw=-G2YAAGRwXkxjaJdDHHQaJnLg0NIMDozvANtA3piigO4Frssu9NwNenH7B9cReYMyx7J3IqvF_hv9dwI16v OX_1i7kz4HcOFInF8wWjEbHZGUcRShqF5DQ==-E

http://gsf-cf.softonic.com/57c/a4f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=14988&instance=softonic_es&type=PROGRAM&Expires=1476160542&Signature=BtUS8Ya1Lt7GJ2Ymxz8W3w4Mf8WkGAF1~4k9W9zf96bbKWru0IWUAZ48VHIyvQt0Dohi-s9B3C5nLzm6RP8GiAkQOjNTFgo8klRzJvRhbu0CK~vYo6UIcAO53OisnKAYwZ-hLLbaWuTEXWPrFyJolZMPbZ-3gU9QVPCCtvd2CSQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=EClea2_0.exe

http://i.download.idg.pl/fannef/86ae674e37dabed633ed62238edb5029/57e8ef3a//zx/vol2/w95/utils/easycleaner/.../EClea2_0.exe

http://high.software.dn.naver.com/d00e255d5c780d0107d421265db1e6a7/.../EClea2_0.exe

http://gsf-cf.softonic.com/57c/a4f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=14988&instance=softonic_br&type=PROGRAM&Expires=1478403201&Signature=ZDw51PPX1QfEgpF85nfDnNgp4oom3v2PLfbBrRaEPNRTHT~tl-7Nd-2T6-iOhtP~4Vp4pZVa29Sq6GywwmljumRHFgtrb9NMd8YAGLoNJ4cY31SpVlbCmsRteHQ~3tR3GVxoCFfEyZ4~qMbMnydn96ImCyJZZ70rYiJv136UgpQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=EClea2_0.exe

http://www.bytesendclear.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

http://files.downloadnow.com/s/software/10/52/27/.../EClea2_0.exe

http://lb.cdn.m6web.fr/d/c/a/d59ca27ebbacedd6fe10b4ddef731d5f/5660a848/soft/.../easycleaner_easycleaner_2.0.6.381_francais_11170.exe

http://f.ccm2.net/www.commentcamarche.net/download/.../EClea2_0.exe

http://dpcdn-s01.pl/.../EClea2_0.exe

http://www.ranchsendgift.com/UKu9EXkHJIsqbgf8GL9DO5EyvHfuBCtjk 37UTdmM65QgRZNE7FVfSFdzwBuUh82tvsVJyPDYmJCfSlbOZS1EGDwF0X2Ze0rsIvCqc_pFU0sdeIZQK1qsepC9nZD56Q_I_1VOIzKhMJtJ158f7wnA4jI8sjlEZaOlj1oXSpKJL cf22vEupmDev RIsvh1YC8xu oDYaNhMYNcKGz1AcuSNvqlJjYw==-GzsAAETdFtt2DFUsWR4mHOSCPggbcOBUijl8V1sH4samKSJVWEF6WCfDbz1Kb46 5W0a9AU=

http://www.e-msjed.com/msjed/.../get-file2.asp?topicid=3276

https://dl-web.meocloud.pt/dlweb/download/Manutenção_PC/.../EClea2_0.exe

http://www.tamindir.com/indir/MjAxNS0wOS0wMiAxNDo1NzozNA==/easy-cleaner-20/windows/.../

http://www.lo4d.com/get-file/easycleaner/.../

http://dpcdn-s10.pl/.../EClea2_0.exe

Latest 30 of 61 download URLs

Scan easycleaner_rus_setup.exe - Powered by Reason Core Security