» onesafe_pc_cleaner.exe
Overview
Analysis
File Details
Downloads (137)

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.

File name:

Publisher:

AVANQUEST SOFTWARE (signed and verified)

Product:

OneSafe PC Cleaner

Version:

4.1

MD5:

e0fa7164aaa3fd94dbc174246e76f400

SHA-1:

20d581ff52cfbfd99c0d1f76ac5a845c2c8b93fb

SHA-256:

bc1c995725ac628e5984f273db6ed103f096c2b83bbd5adbf565d1a572f1efa6

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/5/2024 9:29:41 AM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Adware.SpeedingUpMyPC.AU application

6.3

File size:

1.9 MB (1,977,168 bytes)

Product version:

4.1

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature

Signed by:

AVANQUEST SOFTWARE

Authority:

Symantec Corporation

Valid from:

2/13/2015 1:00:00 AM

Valid to:

3/7/2017 12:59:59 AM

Subject:

CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:6a1zYNtLwPl0k97H+pxaOxhyZZLhmUoMOYDoJ53inXBgl:z1YNtK0k1H+pxPhQkUZ3DoCRgl

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD... 
[+]

Entropy:

7.9938

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 50 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ADxyduHC0wgAA_9yNXX_TEZ2BbCqS7ZhB-EHLocHojg3AQAAAAAEAAE&filter=694672&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AApEhrHK0wgAA_9yM4TnjD5bdabTTJcEPIzXuoubEzSaAQAAAAABAAE&filter=681973&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AID8amOc0wgAA_9yXG8jJ-8gXk2YSLc2uqtVUFamJ_6JCgAAAAAFAAE&filter=100844&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DE_PP_TAP_OSPCC&keyword=DE_LP1&campaignID=TAP-CPI&mrmid=&mtmid=&clickid=adkm_ZaKp0YoUf_JIL3aJe0GfpajYj_tNx2wzFjPlO6oiEP0EXc2yXrJGwM_GU0CVVh_VvGEEdTPFdyEsYTECIceTDqtknbLV09Pf0AGm6HsoMu9q2IAphK_vPW6z97OYEDeaLc9qZQ_F6SyWOibYzj_RfIb7-kU1GITqSyQDx4eR3P81zxwdRF0IdCcX0797vA-EiAzVm9C2hrUtJPoSq6r0wF1nXIjg_F7qkK3sP6lOxQI1e-EhBCJzUpd4scTsGpeblC8SxtBOocJYxdkvVS_rT6y9ZxwXAvLdMTgk3VPPu5F1gfxVabukZ05_TSLXhuaiMymADmNQyUi2YkA13eU7iuVwb0Z7KDhOWNp9G3bV_w-tcZcnsqSfapZiiJbIIYdtISo-QLVNZitaeirgoAn-K6yTjVPeCO2lPYeVCvlnDkOdckBpUn0KRMRpoCM4G_bGo9qkXK4rF5ATWAdbtRWsIXcYLDTBB5UadLMVDHYJIQrjgSpz-0yAESQ2QyLJ5j-CKt_H7AEg19jruvtlsuS1lQQO9TA4uZEEP_O_&filter=70678102&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AIwnExZW0wgAA_9Z0SS8ngdxM6MPR7EWY94a51rWCIHVCQAAAAAEAAE&filter=110459&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_SECCO_OSPCC&keyword=DE_LP1&campaignID=SECCO&mrmid=&mtmid=&clickid=08_41700170_2f702ae2-f049-40c3-94a7-de131154caca&filter=224396_50pop&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3951358&keyword=1204637&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921928_253747_3o1_AD1C833AAC4742941936448742_-1_3951358_14oct_533_AD1C833AAC474293390338377_m_19_7612780951836534592_900587___-1_2g_4o9b_19&filter=900587&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_CH_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ANpW4PmB0wgAA_9yNXsbRLbgGgJ8Qp4gHhZNGekAm1--AgAAAAAHAAE&filter=157723&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AI5sVAli0wgAA_9yQy7zH9me5MeNTrvD8GsXQo6KexoaAAAAAAAFAAE&filter=387218&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AJY8V1qB0wgAA_9yXG-DS9z3dw92R4c1Wb61KD4vg8lgAgAAAAAFAAE&filter=102176&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AIDZoAXJ0wgAA_9Z1vj-2UA8aI0iRLCAi30-IwsvthvBAAAAAAACAAE&filter=681973&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DE_PP_TAP_OSPCC&keyword=DE_LP1&campaignID=TAP-CPI&mrmid=&mtmid=&clickid=adkm_-_8sCw7Mmh19i0RiXRVVMNdt8efzirK3KMdbK2h05kRMkhyB_4zm9ezUnInJvq3a-miglkpxb-S9frTrXUY9r79YlATfXccPxL8MSN7fgJxnW-phO5w5iprmfKR9aI1uykTyGRZHORW3hHIcQmmPcd9FizZsk2Rq1GR6UEs2TpA6k-TwUtF9JEnveoDE-Ml5J5P4h8x8B57aaSSOwd0C9_6zwLBpnC7X-5sLAIlm00tjD_CsEy2QFW-av8sdb8S3cBV33zNbXJP4eflwqVmRNR_FKVfoxcwu2KyIc9Ezj_lXQdHIGswDuKV2BJeqbSlueqloBmRDQPXEkZJe0a14MNb27dBf1Lp6ZH-UZoQ790u7YNvYqZxuVH3RxKjvBCh7eB8AN6tAedDJwUPogXL0MhboTMICosYBvKHkRaBMKHt91JDDBw4sXIS0oaG9bQd7AKZWtt3On6NTsAr4WMzC&filter=70678102&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ADgNrmjH0wgAA_9yQxwKEbHBOHltR7aGGjHPRPhH_kPmAwAAAAAEAAE&filter=479572&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ADLYz3nA0wgAA_9yQxwHvE1JzrJXQLO9hRPcY4fpOynWAgAAAAABAAE&filter=479572&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AHZUqxuh0wgAA_9Zy1LCHty-wG6LQalGlmcUbeSJISZEDQAAAAAHAAE&filter=110459&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=47&tracking=UTL_DE_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzI1OXw1MTAzfERFfDN8MXx8WW1GdWJtVnkqTWpjMU5qYzF-YTJWNWQyOXlaQSpkMmx1Wkc5M2N5QndZd35ZMmwwZVEqZTJOcGRIbDl-Y3pKeipOelpsT1ROa05qQmpaV1kxTkRSbU5HSXhOakZtTTJaak1tSTJabUZrWVRRflpHOXRZV2x1KmQzZDNMbmRvWVhSellYQndMbU52YlF8fA&campaignID=SNW&mrmid=&clickid=MzAjNDgxIzIyIzI1OXw1MTAzfERFfDN8MXx8WW1GdWJtVnkqTWpjMU5qYzF-YTJWNWQyOXlaQSpkMmx1Wkc5M2N5QndZd35ZMmwwZVEqZTJOcGRIbDl-Y3pKeipOelpsT1ROa05qQmpaV1kxTkRSbU5HSXhOakZtTTJaak1tSTJabUZrWVRRflpHOXRZV2x1KmQzZDNMbmRvWVhSellYQndMbU52YlF8fA&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DE_PP_TAP_OSPCC&keyword=DE_LP1&campaignID=TAP-CPS&mrmid=&mtmid=&clickid=adkm_K52Bbs1vtd3zh8j2ZFEvQITOfjiTZWWqvh326WOpc0nhZd8sOJ7MEPRZGHuIfomKNcVjRieLpNw6QKVz8y7EpDBOn-DUWmQ4vTeY3snnUX5cKIAMF8ZbcDreGZskb4Ls7nCmfXyi5NdXFAIjLEkTLvapqQ3Zk4PuxOUkxpZF86iIAwqPTy6d9PevUvj100tEAn-yljlo_Mg2IlYLv_7Xr6kPscBS9QJZq6hp7b8UO5LlchqoCfLKTA-Jcn9iN74jXouNUSk3SLEkcuC8SYMjHmtw6mZsLMxrNtkFeIzZuwMDUVg6aK5o0wJRHl-0AwwU0ee5TH_cS23RTA4mIIVdGV8e5RCsPLgzusXrw33vi5e2jXWXN9BYf48nupr81XDtsdRzGoTPF4YCvdWG7r8EsknDCZOW4BjVG0gSYr0EVKDDEqmMT7ylCY4isuEGOFgcmmYdqmq-Zo-Wj1ITEjRvanrFrO9tsi6FWoRdW56zj_knZLl2An_HA0PlZm2VXO5AvQtAJ_MKn_hr5VL3il9tlwR4E1V18XBCfSUN8yko0bgNOEvbFrecFh2vPsVM&filter=70445197&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_CH_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AHbpiqhy0wgAA_9Z2uGknMEqV7TxRZ55hoEoVboatCONAAAAAAAGAAE&filter=26402&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AHItXGTD0wgAA_9ZzVAphg6pdPt5SKnHOiPTi705IJB3AQAAAAAGAAE&filter=479572&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AJy2L0290wgAA_9yWIC1OwXFu6zoTIeas6Vc7jgKt_YDAQAAAAADAAE&filter=681973&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DE_PP_TAP_OSPCC&keyword=DE_LP1&campaignID=TAP-CPI&mrmid=&mtmid=&clickid=adkm_Oa4WOH2-2cVILlwlgX7evx8M_VSmp7zlCqVdCizmIjiWoUFLtrvZDoAny6re8KNvewWoAg_RhOqUUVFoKjdW4KT6W7864Hzyax8B4MHe2xTgwu6dotQDGpzSm_-0WvNBuKF9QhMZ1eo2W2yLtthJRy1L6QfZMWME0ua1niFdhKXyy0_oC6WheNepnxhf47Qf7gzSWERbFZl4jlh1szeztjY6ouejTN6-8ktriZpPszAnpDk7pDPq7iy3Po3DzpLL4dJSuhKq5htbwapGTr9mg6V7iN_s4OwtxWonRStoRs56fg4_2QggEeElc5dsGDlc5ZBM8ivxZSH2yvDQwGckncdHnwy8i1WWOUDFeQVKShSbtZgs0HoKGNZBM3kZA6hUUEoLk1XuMybrKJgnTRAu-G7LVy1av-5nnUhsNDxYPPuNA2leGw8021S_3h__nxLzVItC_-0yXsU3mQpOkonnlgvpKaQYtmGOu_4av-KwHjd6qHmxT0AgL0i6NUbhiQ&filter=70444626&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4342657&keyword=1029767&campaignID=VEL-CVM&mrmid=&clickid=v1_7921928_264437_3o1_156DE23CE7124331313169722252_-1_4342657_vdk7_536_156DE23CE7124331312103505431_m_19_-3609790005331508856_907297___-1_2g_4q27_19_&filter=907297&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AHwPnvJ_0wgAA_9yXG-DS9z3dw92R4c1Wb61KD4vszuhAQAAAAAFAAE&filter=139202&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AF4NDk6Y0wgAA_9Z1RYiivrYaWmzT4I8dQlyR8zH8C8mCAAAAAAIAAE&filter=110458&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AHhDT2PE0wgAA_9Z1vjh9eXujGYPQbGthFJOmlnaUusUAgAAAAAEAAE&filter=681973&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DE_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzc2NHw0ODA4fEFUfDN8MXx3aW5kb3dzN3xZM0psWVhScGRtVSpNekkzTnpZeH5ZMkZ0Y0dGcFoyNCpPVGMyTXpVflpHOXRZV2x1KmQzZDNMbTl1WlhOaFptVXRjMjltZEhkaGNtVXVZMjl0fmEyVjVkMjl5WkEqZDJsdVpHOTNjeUEzfmN6SnoqTTJFNU1UVTVNamxtWm1NMk5EZzBZV0pqT0RCaFpHRmhZbVZoWldNMU16Y3x8&campaignID=SNW&mrmid=&mtmid=&clickid=MzAjNDgxIzIyIzc2NHw0ODA4fEFUfDN8MXx3aW5kb3dzN3xZM0psWVhScGRtVSpNekkzTnpZeH5ZMkZ0Y0dGcFoyNCpPVGMyTXpVflpHOXRZV2x1KmQzZDNMbTl1WlhOaFptVXRjMjltZEhkaGNtVXVZMjl0fmEyVjVkMjl5WkEqZDJsdVpHOTNjeUEzfmN6SnoqTTJFNU1UVTVNamxtWm1NMk5EZzBZV0pqT0RCaFpHRmhZbVZoWldNMU16Y3x8&filter=215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=APrQbYTA0wgAA_9Z3OjlJUsGAhXUTqcTAsfR7IDmJKQIAAAAAAAIAAE&filter=681973&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AKohiMC00wgAA_9Z2QWOx8tDxwHQRqMnIk1pJWfadPEMAAAAAAAEAAE&filter=110458&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_TBL_OSPCC&keyword=msn-germany&campaignID=TBL&clickid=&filter=minisite&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DE_PP_AFD_OSPCC&keyword=DE_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=APCixwqC0wgAA_9yNXsbRLbgGgJ8Qp4gHhZNGekAo9fCAgAAAAAJAAE&filter=102176&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 137 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.