home

professionalturbopc@clk2=acygrfiy0wgaa_-lmqai-zu_j7ezqqrvy-0vl8-zrukhcaaaaaaiaae.exe

Professional Turbo PC

MB Media LLC

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from my-pc-cleaner.org and multiple other hosts.
Publisher:
Rainmaker Software Group LLC   (signed by MB Media LLC)

Product:
Professional Turbo PC

Version:
4.1

MD5:
aa15753bd52428fcb872ff455be765ab

SHA-1:
e7d87f74c78f84e909292ea8c91ebb1db5afda94

SHA-256:
6a0043e55b39a2111a48d30c06317186c97d7a33035869609bdf85a28ce2238c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 1:35:17 PM UTC  (today)

File size:
1.6 MB (1,636,400 bytes)

Product version:
4.1

Copyright:
Rainmaker Software Group LLC

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\professionalturbopc@clk2=acygrfiy0wgaa_-lmqai-zu_j7ezqqrvy-0vl8-zrukhcaaaaaaiaae.exe

Digital Signature
Signed by:
MB Media LLC

Authority:
Symantec Corporation

Valid from:
4/28/2016 6:00:00 PM

Valid to:
4/29/2017 5:59:59 PM

Subject:
CN=MB Media LLC, O=MB Media LLC, L=Wilmington, S=Delaware, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
5647B0CB5A2F58EB62D0A2DBA47D4EFD

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:JaTPXA3ZXFRw6nAprxY7iL05tJHvcJinXBg:ATfqXRDka7iatxvxRg

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9916

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file professionalturbopc@clk2=acygrfiy0wgaa_-lmqai-zu_j7ezqqrvy-0vl8-zrukhcaaaaaaiaae.exe has been seen being distributed by the following 29 URLs.

http://my-pc-cleaner.org/download.php?rwp_campaignid=100912&rwp_clk=AAjS-iqc0wgAA_-G7BncxWCXLOm9S7yg5jDwUX_uFlB_AQAAAAAAAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=AGiPpyaa0wgAA_-LB8tKj983aY90SLLkNQoMH1lr--eXAAAAAAADAAE&rwp_pubid=2050&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=100912&rwp_clk=AESgvV6b0wgAA_-LJQ3FekoK77FGTqKuz1lmiXkzRL4rAQAAAAACAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=77397&rwp_clk=AEg3BH-Z0wgAA_-LMqCKlckRaMotSZJQmgYNNUj-YE5JAAAAAAACAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=76787&rwp_clk=AGjrE1CZ0wgAA_-LHxsqUpR3AiunQrlJ2uCDKoU3lRktAAAAAAAJAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=ANbybCeZ0wgAA_-LMMLGlTkMsotQQIoX1_QYIH-fqIwdAAAAAAACAAE&rwp_pubid=7445&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AJq1qhKe0wgAA_-LHxsqUpR3AiunQrlJ2uCDKoU30ulHAgAAAAAGAAE&rwp_pubid=2050&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=77392&rwp_clk=AKxmg_Cc0wgAA_-LLquMzZxHDKWORLhqOPzroZYtt6rMAQAAAAADAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=ALjscY6c0wgAA_-LB8tKj983aY90SLLkNQoMH1lrIzmmAQAAAAAJAAE&rwp_pubid=6172&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=76787&rwp_clk=AG5zHH6Y0wgAA_-G8A3NAJqsQJipS4FbNnadqDvUQvc4CAAAAAACAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=ANyX_Luc0wgAA_-G9esY2mnWYiC1SLCho28kDuXAZ-m8AQAAAAAFAAE&rwp_pubid=4148&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AMzSaxSb0wgAA_9Zy1LCHty-wG6LQalGlmcUbeSJ_vmuCQAAAAAGAAE&rwp_pubid=7446&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=83342&rwp_clk=AIrbIiqe0wgAA_-G_arbdKiCLa_6SYncLOusij01vxhcAgAAAAAJAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=ACSSpe2d0wgAA_-G8A1m9xRO56bDRLoPDkmiELajPjA7AgAAAAAGAAE&rwp_pubid=6172&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AAxtCV6d0wgAA_-G_bfKMsvwpJvjSIDJqoXx7I0gfAL_AQAAAAACAAE&rwp_pubid=2050&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=100912&rwp_clk=APL42g2b0wgAA_-LB8tKj983aY90SLLkNQoMH1lrcGUDAQAAAAACAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AIpJcEaZ0wgAA_-LMqCKlckRaMotSZJQmgYNNUj-OzUrAAAAAAAFAAE&rwp_pubid=7627&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=77392&rwp_clk=AC4lbvSa0wgAA_-LHxsqUpR3AiunQrlJ2uCDKoU34MryAAAAAAAIAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=AOQ-fYyc0wgAA_-G8A1m9xRO56bDRLoPDkmiELajUZamAQAAAAADAAE&rwp_pubid=8018&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=76787&rwp_clk=AFhuqlWZ0wgAA_-LF1mDF2xNmfTeTrZCu_Nd9eWYgE4xAAAAAAAAAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=AMy8wg6c0wgAA_-LHxsqUpR3AiunQrlJ2uCDKoU368FxAQAAAAAHAAE&rwp_pubid=7835&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=ADb8COOb0wgAA_-G9esY2mnWYiC1SLCho28kDuXAXq9gAQAAAAAGAAE&rwp_pubid=7446&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AOQKm1uY0wgAA_-G8A3NAJqsQJipS4FbNnadqDvUnRgpCAAAAAAFAAE&rwp_pubid=7783&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=97863&rwp_clk=AHgkHrCa0wgAA_-LMMLGlTkMsotQQIoX1_QYIH-fDhndAAAAAAAAAAE&rwp_pubid=6172&rwp_al=g0gle&rwp_lpid=2

http://my-pc-cleaner.org/download.php?rwp_campaignid=76787&rwp_clk=AHYeZWGb0wgAA_-G_arbdKiCLa_6SYncLOusij01CPonAQAAAAAIAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=ADo4lZ6b0wgAA_-LF1mDF2xNmfTeTrZCu_Nd9eWYuclCAQAAAAADAAE&rwp_pubid=7445&rwp_al=g0gle&rwp_lpid=1

https://s3.amazonaws.com/safe-g0gle/.../ProfessionalTurboPC.exe

http://my-pc-cleaner.org/download.php?rwp_campaignid=77392&rwp_clk=ABjXIlqZ0wgAA_-G7BncxWCXLOm9S7yg5jDwUX_uKqQ1AAAAAAAEAAE&rwp_pubid=&rwp_al=g0gle&rwp_lpid=1

http://my-pc-cleaner.org/download.php?rwp_campaignid=97865&rwp_clk=AEr9JUad0wgAA_-G7BncxWCXLOm9S7yg5jDwUX_uSG32AQAAAAAIAAE&rwp_pubid=6380&rwp_al=g0gle&rwp_lpid=1

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.