home

efrcsetup.exe

Eusing Software

The program is a setup application that uses the Wise Installer installer. This is installed with multiple programs including Eusing Free Registry Cleaner. The file has been seen being downloaded from dl16.download.fi and multiple other hosts a web site host known to distribute potentially unwanted software operated by AfterDawn.
Publisher:
Eusing Software

Description:
Eusing Free Registry Cleaner

Version:
3.3.1

MD5:
85015c5e8346e8b9db38d1711db282ff

SHA-1:
269ec7895f7f4b0c1367bae6a76db3b7d3b12910

SHA-256:
15b8d5f3770d866228364134f9eaf96fad7825c40905a073ab7753c087d6239d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:34:07 PM UTC  (today)

File size:
958.9 KB (981,869 bytes)

Copyright:
Eusing Software

File type:
Executable application (Win32 EXE)

Installer:
Wise Installer

Language:
English (United States)

Common path:
C:\users\{user}\downloads\efrcsetup.exe

File PE Metadata
Compilation timestamp:
10/25/2001 2:47:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:jny2yeZ7qyTzae3j9OQXbnfx1MH3P0/1T/WErvRoc6NQZlJT+:jnDJzaGj9V3Mfk1rWGpB6Ng4

Entry address:
0x21AF

Entry point:
55, 8B, EC, 81, EC, 2C, 05, 00, 00, 53, 56, 57, 6A, 01, 5E, 6A, 04, 89, 75, E8, FF, 15, 54, 40, 40, 00, FF, 15, 50, 40, 40, 00, 8B, F8, 89, 7D, F4, 8A, 07, 3C, 22, 0F, 85, CC, 00, 00, 00, 8A, 47, 01, 47, 89, 7D, F4, 33, DB, 3A, C3, 74, 0D, 3C, 22, 74, 09, 8A, 47, 01, 47, 89, 7D, F4, EB, EF, 80, 3F, 22, 75, 04, 47, 89, 7D, F4, 80, 3F, 20, 75, 09, 47, 80, 3F, 20, 74, FA, 89, 7D, F4, 53, FF, 15, 6C, 40, 40, 00, 80, 3F, 2F, 89, 45, F8, 75, 64, 8A, 47, 01, 3C, 53, 74, 04, 3C, 73, 75, 06, 89, 35, 58, 53, 40, 00...
 
[+]

Entropy:
7.9962

Packer / compiler:
Wise Installer Stub

Code size:
8.5 KB (8,704 bytes)

The file efrcsetup.exe has been discovered within the following programs.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
Eusing Free Registry Cleaner  by Eusing Software
Eusing Free Registry Cleaner is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.
www.eusing.com/free_registry_cleaner/registry_cleaner.htm
57% remove it
 
Powered by Should I Remove It?

The file efrcsetup.exe has been seen being distributed by the following 4 URLs.

http://dl16.download.fi/download/d87ca97d48176c2052ccac0b5e44a855/5356c761/.../EFRCSetup_v3.3.1.exe

http://www.download.fi/.../download.cfm?version_id=72753&software_id=2306&mirror_id=0&installer=0

http://www.regsw.com/.../EFRCSetup.exe

http://www.eusing.com/.../EFRCSetup.exe

Scan efrcsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.