adwcleaner.exe

AdwCleaner from Xplode is a free application designed to search for and remove adware such as browser toolbars and other potentially unwanted programs and specifically targets software that is bundled with free programs that you download from the web. This is a setup program which is used to install the application. The file has been seen being downloaded from s6873.chomikuj.pl and multiple other hosts.
Version:
1.703.0.0

MD5:
07da6c9c3547c38bba12e63f54fd9b00

SHA-1:
c386d2d5480713c729a6b9726fb9d3bbb6c9fda5

SHA-256:
c4bf23ee8004fd26ecc854692cd6b5c923a726e75f80def45da14ecf299f04ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 4:36:35 PM UTC  (today)

File size:
617.2 KB (632,049 bytes)

Copyright:
Xplode

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\adwcleaner.exe

File PE Metadata
Compilation timestamp:
1/29/2012 10:32:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:z6Wq4aaE6KwyF5L0Y2D1PqL6Ws0a8YyLzgvWMZf8Mw:ZthEVaPqL6WsEYwzgvTWh

Entry address:
0xBBE70

Entry point:
60, BE, 00, A0, 47, 00, 8D, BE, 00, 70, F8, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
268 KB (274,432 bytes)

The file adwcleaner.exe has been seen being distributed by the following 8 URLs.

http://s6873.chomikuj.pl/File.aspx?e=saoEi04yGdbdGda6N10i22sAP-UoRCY1BXA20pIHxR5DyiLQCrW2Vaz3D7FcAoPN2mCFzWCrY3u5hNI5uAuYsaC4tXdt8CJSaa5j77TOSiu5kps7luKmfhj-W2Qx5TbtBSf9bKbaL1A5D6yPCct38A&pv=2

http://s6873.chomikuj.pl/File.aspx?e=saoEi04yGdbdGda6N10i22sAP-UoRCY1BXA20pIHxR5xMJJIL1VlI5zSDb8ARtuCSuqw3JSgfQr4YBD7Kq37bkXJ8WNGX2FZKHInVcpsE1oSapkDMPJRM5v5foi138hCH71yilC-yrAUjOUl7Sw_pw&pv=2

http://s6873.chomikuj.pl/File.aspx?e=saoEi04yGdbdGda6N10i22sAP-UoRCY1BXA20pIHxR7svhp92KRBvQbiZzG5iJA2o824-jF4xB7ce0wRjt4hOTscFHarY0z9cj-I16mYWXjkSvWVKi6WdBlvehnLGUGY9_3EdqgZlvqd1pv8rCm3gg&pv=2

Scan adwcleaner.exe - Powered by Reason Core Security