home

adwcleaner4.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dpcdn-s01.pl.
MD5:
552470037b7ac97a76840e0a1fc1f3f3

SHA-1:
ecb42bdd18be333637cac115ca013c94806db204

SHA-256:
9c858b7d29302a4a4f10f22db7ce71ae2091f1282e4dd02f7e5ffced42b3fb4f

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/2/2024 11:32:52 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Razy.15011
16.07.11

Norman
Gen:Variant.Razy.15011
28.05.2016 13:03:37

File size:
2.1 MB (2,159,788 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\adwcleaner4.exe

File PE Metadata
Compilation timestamp:
5/12/2015 9:54:28 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
49152:rUiDaIbsPaeKrECyHSw3QczMgASf1oGpjQ6:r+VaeKrEjZ3TzM09Xm

Entry address:
0x29E1E0

Entry point:
09, C8, CB, 84, 72, 1B, DE, 34, E1, 34, 40, 00, 36, DB, 5F, 5C, 17, 82, CE, ED, 65, 50, 54, 77, 2D, 84, 63, F7, B0, F4, 2E, B0, FC, EF, 0B, F7, 94, A8, BC, 26, 90, 01, 38, CF, 3D, AB, C0, 7E, 29, 9F, 94, 81, AF, F6, 8C, C3, 4F, 5E, EE, 95, 70, 84, 1B, AC, 95, 01, 6B, 0C, 1D, 1A, 9C, 84, BE, D1, E9, 39, B2, 9A, 41, 9A, 85, 05, 0A, 3A, 5B, E6, B9, BE, EF, 29, 4B, F4, 97, AF, 4C, 5E, CF, 01, 26, EB, A7, C5, A9, 40, D2, E0, A6, 0B, 32, 93, 88, 18, 06, B4, 95, E5, C1, C7, CF, 6B, 82, 4F, EE, 68, 86, 6D, 6D, C5...
 
[+]

Code size:
340 KB (348,160 bytes)

The file adwcleaner4.exe has been seen being distributed by the following URL.

http://dpcdn-s01.pl/.../AdwCleaner4.exe

Scan adwcleaner4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.