» systemcleanersetup-a1220.exe
Overview
Analysis
File Details
Downloads (8)

systemcleanersetup-a1220.exe

System Cleaner

Pointstone Software, LLC

The application systemcleanersetup-a1220.exe, “System Cleaner Installer” by Pointstone Software has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from en.softonic.com and multiple other hosts.

File name:

Publisher:

Pointstone Software, LLC (signed and verified)

Product:

System Cleaner

Description:

System Cleaner Installer

Version:

7.6.21.660

MD5:

069b3424c0dba67a621703d4c8bb77d5

SHA-1:

a204c1e3ebd8d035b9ae638ed8f2652499c1c0b2

SHA-256:

b72a4cf2de09b4cefd902627473cc4596d3aa7946f59919a7f8a9d5ae92d7e51

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 6:06:46 AM UTC (today)

Scan engine

Detection

Engine version

Comodo Security

Heur.Packed.Unknown

23466

Reason Heuristics

PUP.Optional.Pointstone.Installer

15.10.25.11

File size:

9.2 MB (9,607,336 bytes)

Trademarks:

System Cleaner is a registered trademark of Pointstone Software, LLC

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\systemcleanersetup-a1220.exe

Digital Signature

Signed by:

Pointstone Software, LLC

Authority:

COMODO CA Limited

Valid from:

11/12/2014 1:00:00 AM

Valid to:

11/13/2019 12:59:59 AM

Subject:

CN="Pointstone Software, LLC", O="Pointstone Software, LLC", L=Newark, S=DE, PostalCode=19713, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

1E600E539078A378196FBC5627EB6553

File PE Metadata

Compilation timestamp:

12/5/2009 11:50:41 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

196608:pnRgNeGw75b0V3SlcBAfLBX+fK8oTaIULtuzG6B6Mf+Rl5AabTa:pnRgAGA0VGUqZGKrmRBWG6B6O+RTAaq

Entry address:

0x30CB

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Entropy:

7.9995

Packer / compiler:

Nullsoft install system v2.x

Code size:

22.5 KB (23,040 bytes)

The file systemcleanersetup-a1220.exe has been seen being distributed by the following 8 URLs.

http://en.softonic.com/sads/tracker.php?ev=c&co=IT&sid=ec28cf9dd21999d0473f114c0c41fb78&upv=cd269600f9132b116f4bda759a6234f6&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E035E8FA087BE321307073B8AE7C0842E8CB81D7558849AA37E8366AD59AAEC13DF47CC92FDEA2884309856548D4585133F8502B3AF04930222BEC65BDB0BF965E405AD264C8113ED615384DED1486A741F1F71BEA93264519055EA9686AB6958E67845E4B091419EFFAA5B6E95F8D6A1EF786082683152F457C2B06B24C71CAE63D1C3C214D8D0340E087254BD553B2091&h=DE497AFE517FB2D28B8A40BD26891D32064406BA5AE29AA202E232C26261E11F&directdownload=1&f=54411&d=http://dl1.pointstone.com/download/.../systemcleanersetup-a1220.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AT&sid=e37d48c149f8fded3ad864a23c425f54&upv=556b6aa2089d8600b4427675ffb52627&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E035E8FA087BE321307073B8AE7C0842E8CB81D7558849AA37E8366AD59AAEC13DFDB92AD8AF11D0ECB0881116B60D5977A003F7D0BF9988053EA4297A91315D832C5BDC508A5893EC287A5767924B1147F093E576228D0694629D0C79CC4E258B321A310BB668F12D85B1832C42B9BD463761DD39C776534D0775C3A5016C700FBC034198C3750E115F0E68E1AFCEC2F57&h=786E893BDA21A218ECB826CB564985BBA3A98CA1EA92D8D0A41D382206005F2B&directdownload=1&f=54411&d=http://dl1.pointstone.com/download/.../systemcleanersetup-a1220.exe

http://www.bytesendclear.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

http://s02.mydiv-downloads.net/download/aHR0cDovL3NvZnQubXlkaXYubmV0L3dpbi9kb3dubG9hZC1TeXN0ZW0tQ2xlYW5lci5odG1s/430a2/21d6a/soft/dfiles/ru/win/System-Cleaner/.../SystemCleanerSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=US&sid=8c356b0b9fa87c86ac32bcd099083d12&upv=df26649b187cd2bf1d964ba8a65c17ae&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E035E8FA087BE321307073B8AE7C0842E8C2FB1B97702FD85D91FAAA6E9378E62B81BC8E88590374A052FE6182BBBE37AB30F4A0F4AD1295EE50B1A99DBAC67E4D11359A7503CFD080650E5F0677438AFE3BF28933ECEC81362F968D256777E2123B4C3073ECFCB0432D651794528426563A05C16A2AEA0DE08EA3F575EC3C90560EE9451C9A92336D06975EB90D4FB14D4&h=CFD5F300BEE7CF1BC055F95B4A4C02F7F7C424583A8ACAA84EE89B42C7BD6211&directdownload=1&f=54411&d=http://dl1.pointstone.com/download/.../systemcleanersetup-a1220.exe

http://dl1.pointstone.com/download/.../SystemCleanerSetup.a1000.exe

http://dl1.pointstone.com/download/.../SystemCleanerSetup.exe

http://en.softonic.com/sads/tracker.php?ev=c&co=AT&sid=4aae76c1d9bd2509fa402021cdfb25a1&upv=c70d12e5e5f813cc209f71a6855dc970&z=results&sk=0&abp=0&params=F39B2A32BFC101987B1458170C278E035E8FA087BE321307073B8AE7C0842E8CB81D7558849AA37E8366AD59AAEC13DF6EADBF1AB9345F109CAC92BD5D173979BE7667D9A3BCBCFC192EE37A3A65CF7EA22B1269CEED80BC00272F8A1565AC04DA7A86486C0FF6067FBE8C4CF071FE7F26D842375652834875C64E6395E7DD9D06E3D07CC62DE8503F0AE1FB2497B6E1C1080AD94A9ABDDEE5D9D5BEBA16D445&h=2A3A06F8DCB4DDE87F4EA6C28AFEC5E496D153256FE5D562FE8C33CF0FBD4EF3&directdownload=1&f=54411&d=http://dl1.pointstone.com/download/.../systemcleanersetup-a1220.exe

Remove systemcleanersetup-a1220.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.