home

setup.exe

Secure PC Cleaner

SYS SECURE PC SOFTWARE LLP

The application setup.exe by SYS SECURE PC SOFTWARE LLP has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The file has been seen being downloaded from securepccleaner.com and multiple other hosts.
Publisher:
www.securepccleaner.com/   (signed by SYS SECURE PC SOFTWARE LLP)

Product:
Secure PC Cleaner

Version:
Secure PC Cleaner

MD5:
8d89b8a87fc6ae8733f5c7400a199897

SHA-1:
dabc14989585c67545f793642958443e5a456086

SHA-256:
4d182fc877aecb6cbd7f81b1b68d8466e40a5f1cfc25545c48af84f9d7886f5f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/16/2024 12:30:08 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.SecurePCCleaner.SYSSECUR.Installer.Meta (L)
16.6.14.10

File size:
3.9 MB (4,101,640 bytes)

Product version:
4.5

Copyright:
© www.securepccleaner.com/

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
SYS SECURE PC SOFTWARE LLP

Authority:
Symantec Corporation

Valid from:
2/11/2016 1:00:00 AM

Valid to:
2/11/2017 12:59:59 AM

Subject:
CN=SYS SECURE PC SOFTWARE LLP, O=SYS SECURE PC SOFTWARE LLP, L=Jaipur, S=Rajasthan, C=IN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
26DC4AA5B755C1CF47EF06729B21AB5E

File PE Metadata
Compilation timestamp:
7/16/2015 3:24:20 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:UQDFU0b4Oj0iFfHBUmLWpK5CjNUKksjlECh/ERyp1g9zAAU18JaR6ltgA4oQqLa:JRU0b4OjLpHNWyE5lDh/xS0piJaWuPB

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file setup.exe has been seen being distributed by the following 40 URLs.

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjEzMyMyMjYjM3w3MTY5fEZSfDN8MXx8fHhkem9yYWw4N2J5OXw

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=136328&clickid=v1_7968557_249107_3o1_1E2AC059D114580182137746305_-1_4305317_15g8b_535_1E2AC059D1145801740401002_m_19_739172517775031500_795568___-1_48_4548_19&tag=795568&ad_id=4305317

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=792471715&utm_subid=270937

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=791211117&utm_subid=270198

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=6180&clickid=AMAI2Bh50wgAA_9yNXsynXKPDK9oQ6_FBsS9L4b-s4EtAAAAAAADAAE&campid=602784

http://securepccleaner.com/getip_build_lp.asp?utm_source=1079&utm_campaign=1079&utm_pubid=224396_50pop&clickid=05_32117358_159fa16c-1115-4b7b-99b8-bbd6659bb18c

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=224&clickid=AM5ShPR60wgAA_9yXG_-_LUQTj5ESq12bjrqmaMBt1PHAAAAAAAFAAE&campid=602784

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=157317&clickid=v1_7968117_256917_3o1_18236278C16308750519981252_-1_4299837_15d5j_536_18236278C163087491957627991_m_19_-6552264914150016898_903777___-1_73_4pk5_19&tag=903777&ad_id=4299837

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjEzMyMyMjYjM3w3MTY5fEZSfDN8MXx8fGs5Z3puMjJ6anptaHw

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=789910919&utm_subid=270483

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjEzMyMyMjYjM3w3MTY5fEZSfDN8MXx8fG5mY2FjODZ3aDE3Ynw

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=154797&clickid=v1_7968117_245127_3pn_D0A1C622BE58460421113892888_-1_4308407_15g5r_532_D0A1C622BE58460411871396950_m_19_-4821302269821586313_888697___-1_73_4n5d_19&tag=888697&ad_id=4308407

http://ttb.lpmxp2138.com/download/request/.../xb9onqTr?__tc=1409305204.967&lpsl=bca01eaa2459192743c1ce9f6504fffc&expire=1409391604&tgu_src_lp_domain=www.dwldultimatesoftupdate.com&ClickID=15106850131409305202&PubID=313711&fileName=Setup

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=157767&clickid=v1_7968557_260127_3o1_5640EB82D016094581691786212_-1_4305407_15h79_533_5640EB82D016094571508956322_m_19_2119873741874859954_907297___2_48_4q27_19&tag=907297&ad_id=4305407

http://gsf-cf.softonic.com/6e1/971/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69679520&instance=softonic_es&type=PROGRAM&Expires=1448047214&Signature=ByrzNjgIZ7YYpmHdYrsnzjGlfgJK8yQpeSfLMCmOt29JoYhvIBbhQf1OBFi~8Cw2QmHZjnUz94mAGTTuD9xCFmy~R20Jy60EMap~Lz-UIKrgL5StNKkgbppizj37KK0zuQjsC6zg~1ZeW7~neshxWbkeErGegvPTaI1itummFNU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup.exe

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=129648&clickid=v1_7968497_207927_3o1_823A28CFCE40055921692690075_-1_4304447_15fpb_536_823A28CFCE40055911032371609_m_19_-6358702264431490814_764868___2_68_3ujg_19&tag=764868&ad_id=4304447

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=6527&clickid=AF6h3vd60wgAA_-G9evHgtudf3brRrKJJ17DkahOoeuWAAAAAAABAAE&campid=602746

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=789557247&utm_subid=270198

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=5294&clickid=AJAdInF50wgAA_-G_aqwHy4x72U7QI8NhooKcyIkhoNEAAAAAAAIAAE&campid=689681

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=788368130&utm_subid=270292

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=5294&clickid=AHAlswV70wgAA_-LJRqY_4r1X3VXQ6hjb23f6bU7PrqdAAAAAAAAAAE&campid=689681

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjEzMyMyMjYjM3w3MTY5fEZSfDN8MXx8fHdnbjNmeTdtaDA4eHw

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=790766776&utm_subid=270483

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjM3MSMyMjYjM3w3MTY1fENBfDN8MXx8fDV4NThmeHJxZ3dpeHw

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=5294&clickid=AI4tEih50wgAA_-G9euhIQoUMHvdSo0XhHnWqKgm4oQeAAAAAAAIAAE&campid=689681

http://securepccleaner.com/getip_build_lp.asp?utm_source=1029sp&utm_campaign=1029sp&utm_pubid=792456320&utm_subid=270292

http://securepccleaner.com/getip_build_lp.asp?utm_source=1043&utm_campaign=1043&utm_pubid=1__3&uniqueid=NDUjMjEzMyMyMjYjM3w3MTY5fEZSfDN8MXx8fGd6bTA3b253ZHprY3w

http://securepccleaner.com/getip_build_lp.asp?utm_source=1072&utm_campaign=1072&utm_pubid=5661&clickid=AAaeRYR50wgAA_9yWIWLZ3Z7MDMGSq5eYr5LwTviuakCAAAAAAABAAE&campid=602784

http://securepccleaner.com/getip_build_lp.asp?utm_source=1074&utm_campaign=1074&utm_pubid=136328&clickid=v1_7968467_255497_3o1_553F6DBA6048210761356548903_-1_4303917_15fjn_533_553F6DBA6048210751818793447_m_19_5914755722650463536_795568___2_16_4548_19&tag=795568&ad_id=4303917

http://securepccleaner.com/getip_build_lp.asp?utm_source=1079&utm_campaign=1079&utm_pubid=224396_50pop&clickid=05_39189595_cadaad6f-8f49-414b-9f2e-22ef7b62cfa0

Latest 30 of 40 download URLs

Remove setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.