home

RegCleaner.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from regcleaner.softonic.pl and multiple other hosts.
MD5:
1ff033e93713c97593280b3b9537318d

SHA-1:
ecda1abba7640d36090617d59d07a7ff433e89aa

SHA-256:
11077972c07f5a83c9f7dbef91a06c753349db067a0dfe1b692be58a11199055

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:18:23 PM UTC  (today)

File size:
540.7 KB (553,687 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\regcleaner.exe

File PE Metadata
Compilation timestamp:
8/23/2000 3:43:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:UVISrTi9X+kpF2yXpoqcspoogaL1f/lDHe4tc/WSe6M4l:UVj3m2yXpoqpgaRf/lD+fOSei

Entry address:
0x46D7

Entry point:
55, 8B, EC, 81, EC, 8C, 08, 00, 00, 53, 56, 33, DB, 57, 53, 89, 5D, D8, BE, CC, 9F, 40, 00, 89, 5D, E4, 89, 5D, F8, 89, 5D, DC, 89, 5D, E0, FF, 15, D4, 70, 40, 00, 8D, 8D, 74, F7, FF, FF, 68, 00, 04, 00, 00, 51, 50, A3, A8, B6, 40, 00, FF, 15, 64, 70, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 74, F7, FF, FF, 68, 00, 00, 00, 80, 50, FF, 15, 80, 70, 40, 00, 83, F8, FF, 89, 45, FC, 0F, 84, F8, 00, 00, 00, 8B, 0D, 20, 9E, 40, 00, 8B, 3D, 6C, 70, 40, 00, 6A, 02, 53, 8A, 49, 08, F6, D9, 1B, C9, 83, E1, 04, 83...
 
[+]

Entropy:
7.8706

Developed / compiled with:
Microsoft Visual C++

Code size:
24 KB (24,576 bytes)

The file RegCleaner.exe has been seen being distributed by the following 50 URLs.

https://regcleaner.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj6RIlAz57KTq7UBT4u7vw/1qOBclASsDBRIZ/.../ciqLSu4GON8GB4UmT2xYh8BVjHqFvcA7bsmjg=

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_pl&type=PROGRAM&Expires=1487112558&Signature=a5gBgxxNPpJFeSt8gtSiPO5uNgD1nFq~mUzb9ERGnCRnocrkj~Q-4zCP7GMtk~~gvyUlFsd2wmkxhzXsST1uJmmZPcG~1uG~krHOnaIZSfEnTxQg7~Rxm-ZnP63-ZnmR82o03yygXHs~Tq5Qe4CsSOw8ltZLnNPHXphHLiag2Pk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://ftp-stahuj.centrum.cz/dl/6cf8d0f35dce980e48605aa63ee40675/5607ca61/stahuj/download/software/secured/r/regcleaner/.../regcleaner.exe

http://lb.cdn.m6web.fr/d/c/a/649d8894708970a330cd3624a73ff7fd/58641137/soft/.../regcleaner_regcleaner_4.3.0.780_francais_10573.exe

ftp://ftp.hs-niederrhein.de/pub/win9x/.../regcleaner.exe

http://lb.cdn.m6web.fr/d/c/a/3f5bcec5f409607b2af02044752d05bd/585ee5a2/soft/.../regcleaner_regcleaner_4.3.0.780_francais_10573.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1421717871&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=duLA0mioHxmksssbPmHMyepbVMWPPRnurEHI3dc2qkfq3-KhsXHoQFmnKRWpSqOqGSTR2BvG0HATTBtt457utL5fG3LYaLzC2Ic-o5gm2wfSBZuh9sg0z4Nud4JtOxJ1FaM2LjVlHU-4fW7B0VlUUcX2o1LIcPxaU0avuOX3y4Y_&filename=RegCleaner-4.3.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=661kgkp46irvm7g02uq0dggt42

http://www.programosy.pl/.../pobierz,regcleaner,2.html

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_pl&type=PROGRAM&Expires=1474476549&Signature=XPwxq98c0Q731efH~axx9L-IQ5YddJeBuueXRHCvhjSiXNDa1XnsmmEZJpaehBt7pRy6fWcmz5YFCpYjWXZyLB3Qf~QOEjP1AjMBRVVUpvI6oj0GTlVT36KEkavzoqtof1latpJhJuqgdlv4FDOsOkX~In2iP6uO1hw14bcfKgk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_pl&type=PROGRAM&Expires=1474833710&Signature=emebEYS4DYfLHCFMt73yL1IE0Frc9~2LO6Zp2WW6PkkgX3JM6GiVGVZnWuVws0nltL3zCfW7-gyXvRG2iysgAh3hLFLK1enkcLMrY7dDQsU6HTKBizhhmZLtC2sB0R0XPi3~skN8divV2hjc1RnSGAlvPeSZ2zZ10~AF9Vyfy8Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1438501502&Signature=OKU9fNzfh7eO8LYblW6utHxtxG1nbv2x~auJaDEodJYaKhnxUBzU3iyZ9srd2bJL3sV1fUTzZ9J0XTrIhqLqrCMQlI7hTV~A~QZdNaNqTuVyLuGLP7tGHI7CigbKEe~iVVmY7A4jmN1UX8kWM8dWT-RHFZs~rZwl6zpXGp20BOc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1448531587&Signature=IlhmwehNz6mszLdwvspzkgUibP24bdJOkN65RJMIv~61Wv6uZZW1c70Xvt9iQXr3P2MLrLqr01tk-UVR24EK5pFw~jP3uJGl0vrOVYHW7k~jmF~vqMDuB5yTZ8l1i9ASgNMRI8BeHbj2fjdw~ydeUgWbyCQQ~CH9I9mISsrxFm8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

https://regcleaner.softonic.com/.../trmsvRChbxdrflJq3ZIylWtskOSaTOn7dr 81QItKog5qEpXK8ZrxnYQ83kNFL9VZYMkmsRISXp OqKKidSGArCTlSj9bxmcDqhYshalTpa4YQfX9C2Fb3kCD0m9h 0SAbmwLAwi8J4Q54yR38Obxmw=

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1431895711&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=C5ImL5l5HVE3RUEbupYmEJIpAG5CAKeD6fYfBrU0Y6DPqZsry6eDt9hOdrYvSw1SRVF58ncN6yXuMxGrlX7a4BdqlkS~zb0xJq1XQj7q2YtzVA2TzKuGUMindI4wyBVox-Bef3t3vK4cK3aP9U44cTn6I7xL1lkIUXehXaFXYcM_&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1464243041&Signature=WJmr2B~IHbT6IisQsH8untKefMEhZkKxZIZ5gbmk60uDlNOcIl~nJEIUFlnUBv6d9AzoLnnXl71VooQvsS4RIdVfuKs7M5HDlbpQkZ9UuECXjyQRaVBP~ItoPyB1BQ-CZqdFvGYELc36YOYpb00i38oCEWqetgmUaCQayXcsNyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_en&type=PROGRAM&Expires=1480265703&Signature=iDtlUMyVXSC18zYMB3mvJmlnFl4-Ud4PVuHFtpuBZvCLV8CT~PJra0jJYjr8khqTzjILym53Rs2SkOT7tp6pPAXnMkKAps-acyPu9kCKlZopKor5pmqXZ3AK7IaOUFhrr9kPMHJZcNapkVEQPDcPK7-wNozESlLYcXXjGfbpQjg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

https://regcleaner.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj6RIlAz57KTq7UBT4u7vw/1qOBclASsDBRIZ/.../ciqLSu4GON8GB4UmT2xYh8BVjHqFvcA7bsmjg=

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1479091187&Signature=ceinsDqJawTZYsZob4vIBxzgJRDFOilzTuxQz~s4crsxCBlfxI7vVXBSAhOhduqukx2qtRnQmfeD0Bu92yGfzAZfiv3HQkB06o0hTmDK5xx-d0-riLRY4O0~xg~-iphvoDkWu7NPwC88njK7dxrY-J7FQ0l8TpNoO99jSrZq9H0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://regcleaner.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj6RIlAz57KTq7UBT4u7vw/1qOBclASsDBRIZ/.../ciqLSu4GON8GB4UmT2xYh8BVjHqFvcA7bsmjg=

http://regcleaner.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj6RIlAz57KTq7UBT4u7vw/1qOBclASsDBRIZ/.../ciqLSu4GON8GB4UmT2xYh8BVjHqFvcA7bsmjg=

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1462776950&Signature=Hxf2OA6LRlV7Z0-T0jdUhcUnrL~AF4rEXEDaoBYEkZdBx2RNi5LXfNh6nbgpvewV4QVKHl5kXOcV2NXw~wDLXl9gcHHfmLoGPPxqNssNqlM~iWhfDA5LWX9VIS-pu-Om5hQOfn5u84ohnGyLLDBoptIoc--9x~oWwC3rTfqLrvs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1466171080&Signature=RkKnxTFD3rk5ZHlN2NucY~IDlq67GqGGY2Ap2FqztFnXcz7UsZoKaonHufwMsh8x4OHofmFASCK1GmO5NZjuz89Y33DlndDGIyNjsyZOoUCZaSpXJlkjjznyVYIkdVslZ54PIcXg~mOINwTCtaD7o7APe0zGdh2duGU1z~ylXWQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_it&type=PROGRAM&Expires=1460948173&Signature=DZFQqnpt4xrIwiFoKRuHcM92pmOQ9CxKxq7HJ-aFs-s1ILwxoidMn9YH1Y-yGHG3y5v4htEvhgc6BVZ2Cpa5w7aR9al4GCIOH33jwQgH9wodEP3idDxPjQL3KBRWL38M9-CsmXoUjMZd1K4VHv6eUImTNp3w~4ssYmMA0Lh929I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_br&type=PROGRAM&Expires=1477353759&Signature=ah~f7K5wsGM05yfDfFA7akKFoFbmwlnpe35Vi9LG7E1irscUCx1tS8sBwG~Dk2Uqasff7RVm3oxz~F3QvZqBqaLuU8SXchdwkqXgbCWVevZ9mc5oDofuYSKeNfix2O~bzBOd~4vJeBA0~XqOJ0qIfy9MPDHgfHc1JZl1UlBe--A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://www.besplatnoprogrammy.ru/dld/soft/.../regcleaner.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1478755445&Signature=NdNVHzdRitrklonbMCmaFetgTXn~NsgYma3Edov1DNFuzNef~nC3GFsh-1r9dk~6ns323gB6mxRIpTc-IIXnpi0HDfYcKn5SDISsE67X50amMuzGtTfOo3vl3qPyvRMv9I8Nm6PUGUUrehgfUsXsGBj565CfPVUxn~O-DdcZ3Uc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://gsf-cf.softonic.com/ecd/a1a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11891&instance=softonic_es&type=PROGRAM&Expires=1469355248&Signature=B9Lw7k50rfqjVSmdqfNuZlbNYE42p0pb3wsbeXnlODz69PETMLhZ4rc3MOgHPWcPTMtHrtnKsp10A3G52NYHxk3OHwy08rPtWkh-3ooADiF2AC~CcQm15z~EPRc9~5nKiJMk6gDQUbKdQ6w~wHSpJC5e77EZvQBA18RoNKmW5K8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RegCleaner-4.3.exe

http://lb.cdn.m6web.fr/d/c/a/06bf9106d476bc1106cfdef3360c9d7b/579905f7/soft/.../regcleaner_regcleaner_4.3.0.780_francais_10573.exe

https://regcleaner.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMqCl6QRr6UyvOWEVdjonx1aUK01/GF4tRf6IB 8Oydj6RIlAz57KTq7UBT4u7vw/1qOBclASsDBRIZ/.../ciqLSu4GON8GB4UmT2xYh8BVjHqFvcA7bsmjg=

Latest 30 of 151 download URLs

Scan RegCleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.