onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.
Publisher:
AVANQUEST SOFTWARE  (signed and verified)

Product:
OneSafe PC Cleaner

Version:
4.1

MD5:
bfcc299f3d547a4d3067782e43984c79

SHA-1:
2a71b04f09769b4cc66d2faeb333d35978826ad2

SHA-256:
244c65d97ab5c63ba299cacc9a46793c3e84e6e5036fc84dcf37d0adbd517efc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:33:25 AM UTC  (today)

File size:
1.9 MB (1,977,272 bytes)

Product version:
4.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
2/13/2015 1:00:00 AM

Valid to:
3/7/2017 12:59:59 AM

Subject:
CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:paIzYNtLwPl0k97H+pxaOxhyZZLhmUoMOYDoJD4DinXBg:gQYNtK0k1H+pxPhQkUZ3DoGORg

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 40 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_NL_PP_TBL_OSPCC&keyword=msn-belgium-nl&campaignID=TBL&clickid=&filter=page1&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4288607&keyword=1022017&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_260127_3o1_9445F2A02F4696474883088237_-1_4288607_v621_536_9445F2A02F46964731084482488_m_19_5292980154836868757_907297___-1_4k_4q27_19&filter=907297&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_PP_AFD_OSPCC&keyword=NL_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AIhTkX-C0wgAA_9yXG-DS9z3dw92R4c1Wb61KD4v0w0RAwAAAAAJAAE&filter=26403&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_PP_AFD_OSPCC&keyword=NL_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ALJo1FSy0wgAA_9yN4bTksuIlPRwTKR2pjQHIzNA2L8_CAAAAAAIAAE&filter=26403&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952348&keyword=887668&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_175358_3o1_3B45C5CC363281223181754174575_-1_3952348_r2rk_533_3B45C5CC363281223171551180649_m_19_7886654331053573882_764868___2_4k_3ujg_19_&filter=764868&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952308&keyword=1205507&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_209277_iv_A359D74CEB21666482114951133_-1_3952308_14p83_534_A359D74CEB2166647455836247_m_19_6757933788917255518_812028___-1_4k_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4288607&keyword=1022017&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_260127_3o1_78D3571CF73261086471619435206_-1_4288607_v621_533_78D3571CF7326108646306903313_m_19_2857933570850298797_907297___-1_4k_4q27_19_&filter=907297&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4354177&keyword=NL_LP1&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922138_268077_3o1_6FEFBEDB9C1120025221464430484_-1_4354177_16g83_536_6FEFBEDB9C11200252181825175_m_19_5856552477368957116_888697___-1_k_4n5d_19_&filter=888697&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_AFD_OSPCC&keyword=NL_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ABwF81OO0wgAA_9yWIaAmReUgEKISYTurn0XRKSJO1YyAgAAAAAHAAE&filter=73238&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_NL_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzc2NHw1MTA5fE5MfDN8MXx8Wkc5dFlXbHUqZDNkM0xtRjJaeTVqYjIwfmRHRnlaMlYwKmUzUmhjbWRsZEgwfmN6SnoqWXpBME1tUTVZakkxTVRKaU5EbGhNR0prWmpSa01UWm1ZVEUwWVRrNE1USXx8&campaignID=SNW&clickid=MzAjNDgxIzIyIzc2NHw1MTA5fE5MfDN8MXx8Wkc5dFlXbHUqZDNkM0xtRjJaeTVqYjIwfmRHRnlaMlYwKmUzUmhjbWRsZEgwfmN6SnoqWXpBME1tUTVZakkxTVRKaU5EbGhNR0prWmpSa01UWm1ZVEUwWVRrNE1USXx8&filter=215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952308&keyword=1205507&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_209277_iv_761860E0F98828481181567666_-1_3952308_14p83_534_761860E0F9882847858900638_m_19_-3262562796362733421_812028___-1_4k_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_PP_AFD_OSPCC&keyword=NL_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ANRb-Xy50wgAA_9ZzVDuzUnA8QM2TLguZ890LwDC06RiAwAAAAABAAE&filter=26403&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_NL_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzI1OXw1MTA5fE5MfDN8MXx8WW1GdWJtVnkqTWpZNE5UUXp-YTJWNWQyOXlaQSpaRzkzYm14dllXUmxiZ35ZMmwwZVEqZTNOMFlYUmxmUX5jekp6Kk9UVTVaRFZoWWpreU9EUTFOR1UyTVRobE16QTRZV1JpWW1KaFpUZzNaRE1-Wkc5dFlXbHUqZDNkM0xtRjJaeTVqYjIwfHw&campaignID=SNW&clickid=MzAjNDgxIzIyIzI1OXw1MTA5fE5MfDN8MXx8WW1GdWJtVnkqTWpZNE5UUXp-YTJWNWQyOXlaQSpaRzkzYm14dllXUmxiZ35ZMmwwZVEqZTNOMFlYUmxmUX5jekp6Kk9UVTVaRFZoWWpreU9EUTFOR1UyTVRobE16QTRZV1JpWW1KaFpUZzNaRE1-Wkc5dFlXbHUqZDNkM0xtRjJaeTVqYjIwfHw&filter=47&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4161317&keyword=NL_LP1&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922128_226127_3o1_C8D067E7E677786921780989838_-1_4161317_12vg9_533_C8D067E7E677786912142531296_m_19_-9147227361193972474_858007___2_k_4548_19&filter=858007&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3988528&keyword=NL_LP1&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922138_244217_3o1_D99C89C3CB891142238617368_-1_3988528_145tb_513_D99C89C3CB89114211860076427_m_19_4947199882170194483_795568___-1_k_4548_19&filter=795568&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952368&keyword=1121357&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_199658_3o1_AC85EECCFA18591921389285660_-1_3952368_1272d_533_AC85EECCFA18591911968489507_m_19_456398175242601337_810508___-1_4k_46mi_19&filter=810508&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952308&keyword=1205507&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_209277_iv_2931A6BE7918262082062063187_-1_3952308_14p83_534_2931A6BE7918262071110546654_m_19_2296187359329719284_812028___-1_4k_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 40 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security