home

ProPCCleanerSetup.exe

Rainmaker Software Group LLC

The file ProPCCleanerSetup.exe, “This installer database contains the logic and data required to install Pro PC Cleaner.” by Rainmaker Software Group has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Pro PC Cleaner  (signed by Rainmaker Software Group LLC)

Product:
Pro PC Cleaner

Description:
This installer database contains the logic and data required to install Pro PC Cleaner.

Version:
2.5.9

MD5:
81091328c9e45a6e840d43aebb2f950f

SHA-1:
4b884b87dbe1ce010155e3402e18c68c27dcb4e3

SHA-256:
180c6183d31ac8e69b335d21bea14ca351db872b4cfa9fe02bfcb50d34e5c926

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 8:22:35 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Rainmaker.ProPCCle.Installer.Meta (L)
16.6.13.20

File size:
6.3 MB (6,626,024 bytes)

Product version:
2.5.9

Copyright:
Copyright (C) 2014 Pro PC Cleaner

Original file name:
ProPCCleanerSetup.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\awh3e9f.tmp

Digital Signature
Signed by:
Rainmaker Software Group LLC

Authority:
Symantec Corporation

Valid from:
2/3/2015 12:00:00 AM

Valid to:
11/16/2015 11:59:59 PM

Subject:
CN=Rainmaker Software Group LLC, O=Rainmaker Software Group LLC, L=Wilmington, S=Delaware, C=US, SERIALNUMBER=5411289, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
44BD3AE304607E86F138009896D74AD6

File PE Metadata
Compilation timestamp:
10/7/2014 4:05:58 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:ZG7cl1155MF19LC5LxtwO7raLldXb43Vs6LICEnCRc+JmWt8mmeGOKIfOiG2tJV:IuQy5L8OP2DkC3Cux+JlieGO3K2t

Entry address:
0xC87EC

Entry point:
E8, 4A, CC, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 5D, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, C5, D5, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, 39, 4D, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A1, D5, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, 0A, 4D, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.7863  (probably packed)

Code size:
1021.5 KB (1,046,016 bytes)

Remove ProPCCleanerSetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.