home

adwcleaner_5.009.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from toolslib.net and multiple other hosts.
Description:
AdwCleaner

Version:
5.0.0.9

MD5:
9c0c6bca7e23ee799e3481c9280f11f1

SHA-1:
e6095f5a6ba701c583b2d8605c269bc68d16840d

SHA-256:
84c889b058dbc394695d37b98ec3174c676bf76140430bb603df12e3811dd365

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/27/2024 12:55:24 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAtITA
1.3.0.7237

File size:
1.6 MB (1,670,656 bytes)

Product version:
3.3.12.0

Copyright:
Xplode

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\adwcleaner_5.009.exe

File PE Metadata
Compilation timestamp:
9/27/2015 12:10:03 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:fq5TfcdHj4fmbZ2dwmcvIsh1xD1IWKsBqpl4STyEcPI/bAX81SvdoFPRl6:fUTsamtiqIshjJIhpCSTyEu98cdoFPz

Entry address:
0x21B110

Entry point:
60, BE, 00, 70, 5C, 00, 8D, BE, 00, A0, E3, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.9904

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
340 KB (348,160 bytes)

The file adwcleaner_5.009.exe has been discovered within the following program.

Toolwiz Time Freeze 2016  by ToolWiz
www.Toolwiz.com
About 4% of users remove it
 
Powered by Should I Remove It?

The file adwcleaner_5.009.exe has been seen being distributed by the following 50 URLs.

https://toolslib.net/downloads/finish/1/get/.../

http://dw.uptodown.com/dwn/BZ2IWIRAnbCX4GCuu2TtArFVnvly3IN5KTj0FP7t1qTjyBMk86pn5byjbw-rGyNvNVoUMoTKxGbGE2U7gYt-tP43mcVbOaSit304YkVLGCNoZI64jDtDZmykJk5sap3A/cudGX_bitDA_NwYaUukJ53JQa06iFiUY6cw7MlchYacghuwCfjIP5Ls0FBZT4upxVp6LEuME6PrYvgk-MR1hZR8KbD9xru-c2szjhvY4LssDQ2qZnQh5D4CbJZkQbd_9/.../

https://toolslib.net/downloads/finish/1/get/.../

http://dw.br.uptodown.com/dl/1443477163/.../adwcleaner-5-009-multi-win.exe

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://dw.uptodown.com/dwn/kxqOthHREbmOQtdIb9Fpg7do607doP4QUCkOTAwQaIZGuDhnvqygQ5nL5VGDtUjvDrwW9570Qu9aWRBN2tuzCtgJQ9vP1eivXq2xJJn-jCrdxHt1pK0w-X0JcCmdvtZj/9pJidZefyG-u6wzkdpkGa3IkYrznhtjd4iEswRkCI3YFIPfiU0qmoibaxSVKbLEneVFYs238qOIU0uMtltE1dHUXQbTN66jRX7yQ3F9bj7EDSRBOybmVxko8RayAZhEO/SHVlYcsIaRdQE5gW4KyZsQvp7oYXXSMslSyq8wO-hVzkAmdWANpkA0Eg_1eHlOmL8euE6A9jyQKYbhInfDjflha9161EXLDbS0DtCxab9sxDeok2mPuHPMa_wMWffrOJ/.../

http://dw.uptodown.com/dwn/b1SwynMZc13JAVsT3xs5c2swn8EzA_zh3jvwRv_12yrCdOWZHZUFbXQ9tfRJZ_ZpkrU-nlJKtY4ZiAqawqbsznZTo2DzT4K6CRMmlsIXBRyJnZzONPAjcyoHhRFyGQsF/hh1QS07brKLLo5VfOAzp963RJWNwtTj9i21yx7iiFFlthZTB-AFpQVEXVIo3n1MrilspDwotqPMgzEMtpSev2xbQBAF1LhtXKQ3yHRc-oWD1wM1A6l5EcMdYdA9wkSiY/.../

http://download.bleepingcomputer.com/dl/8891bc19f20fd0c592a1000488696b9d/560fc6ab/windows/security/security-utilities/a/.../AdwCleaner.exe

https://toolslib.net/downloads/finish/1/get/.../

http://dw.uptodown.com/dl/1443453063/.../adwcleaner-5-009-multi-win.exe

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

http://dw.uptodown.com/dwn/TsI2pxYX5Vql_j2_SP_APn3OIbEgWeTMJu_yUlzc6pMz2Y-k2lGwljeHuXWEVubqx1lGQZwEkpTvxx-eAB-K92esQbxfFYf8FPCXxQlx3L1Y_A3a-qY1mOsDzpX_uR8S/4aUfdwJztiygfvpdUiI3TYDQ5Nd1NPW2RjuLtj5NL1VsmIqbE1DFnljG7fHwGEIa28LuIiP5jKLF97GUs_l3JBXZ_dqnda9ZW64i4ERRKcDp-S_RQLG9AJGwMtaNsZkV/.../

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

http://download.bleepingcomputer.com/dl/aa4c9f3020191a1fce01fee91fdde759/560d5434/windows/security/security-utilities/a/.../AdwCleaner.exe

https://toolslib.net/downloads/finish/1/get/.../

https://toolslib.net/downloads/finish/1/get/.../

http://dw.uptodown.com/dwn/UdGptl98888dMpCSl9XpG0OYV3WH3ozE50beAUcVUTYQypGl8bDcqmtZimzUai7k7bGClIEv_4x_YoANRmMUHNFkjHqsplRPTqFKZvLchLHJrviGUQH9i4SW_eE31Gtk/UrNAPyioA0ZFUW-RWlFbQBUiDP4eodi2nScM-Q1be1D0nS7OZo1LxPd8jl9005GcP9_727OnuCLmX4aEb5or1kfFUZwYz62MjrDlvVU8-dSNt6ufjxdq8MEVfSAYJmKT/.../

http://dw.br.uptodown.com/dl/1443609919/.../adwcleaner-5-009-multi-win.exe

https://toolslib.net/downloads/finish/1/get/.../

https://dw.uptodown.com/dwn/fnJhDIP-oSXxrUXFllH0j5d85rd4vzRm8Ap1SHzRWNYd7iGh_uicj5WrnDAZziU5GLjX7oqoEVfBMzQHoSmKjAK06ACgW8d3rk8eK23AaUYVWfF6UXNRCT8OxwXL3Di5/1jUC2dgxdeeNH62o7OC-qzV5SqRexrk1E-syYb1A_vqHDvqG3DbSPibrAGxDDQuiSZI-N8YY_r4lSUaT8ooEIaIt22yp86EQB6Fmh3LTqwyRrKVsIkEHSUvQnj-LJc1a/7HQFIezt6v8EACeKSGqyoh8Fdo9Hrh8-Xz4C5mqA0_NiSLqqON7n3rwzQqv2G3r3opiZsprbhPPQDMC-1NiGZfIKyMDwlN7LLJomnTe2CcyngJGFdbEsJvjjT71waQVp/.../

Latest 30 of 442 download URLs

Scan adwcleaner_5.009.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.