» onesafe_pc_cleaner.exe
Overview
Analysis
File Details
Downloads (414)

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.

File name:

Publisher:

AVANQUEST SOFTWARE (signed and verified)

Product:

OneSafe PC Cleaner

Version:

4.1

MD5:

fdffc2940f4685806f5478a7ad682b2e

SHA-1:

30f3cb77809642f798e87bfd7d9191b449b43b8c

SHA-256:

9a08c4075e0f3ecb394257a82e660cf2695e22e96ff595d5fc199c7a25014722

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/27/2024 1:52:48 AM UTC (today)

Scan engine

Detection

Engine version

Dr.Web

riskware program Program.Unwanted.611

9.0.1.05190

ESET NOD32

Win32/Adware.SpeedingUpMyPC.AU application

6.3

File size:

1.9 MB (1,974,992 bytes)

Product version:

4.1

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\onesafe_pc_cleaner.exe

Digital Signature

Signed by:

AVANQUEST SOFTWARE

Authority:

Symantec Corporation

Valid from:

2/13/2015 1:00:00 AM

Valid to:

3/7/2017 12:59:59 AM

Subject:

CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:Va3zYNtLwPl0k97H+pxaOxhyZZLhmUoMOYDoJp6inXBg0:0jYNtK0k1H+pxPhQkUZ3DopRg0

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 50 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=v4&campaignID=AFD2&clickid=AEzYm2yN0wgAA_9Z2usU0X9Lixd-TJxRqKIBF4Nm7wubAQAAAAABAAE&filter=690535&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=NEW_TESTV4&campaignID=AFD2&clickid=AEhdzc-k0wgAA_9Z1RYiivrYaWmzT4I8dQlyR8zH_ninDwAAAAAGAAE&filter=313215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4288447&keyword=&campaignID=VEL-CVM&clickid=v1_7922068_190438_3o1_FEA1C5CA0654564181624717085_-1_4288447_r16q_536_FEA1C5CA065456417611047247_m_19_7863590054038211398_906177___-1_29_3qka_19_&filter=906177&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_FB_OSPCC&keyword=Vendeur_Jeune_Art3&campaignID=FB&clickid=&filter=page3&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_OUTB_OSPCC&keyword=page5_title3_0.15_expert&campaignID=OUTB&mrmid=&clickid=&filter=5316257&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=ANSwnqB90wgAA_9Z1RYU9QSn7qTZT5FzEXPb6ZGpd9tTAAAAAAABAAE&filter=26403&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4102127&keyword=v4&campaignID=VEL-CVM&clickid=v1_7922068_245227_3o1_6429BFD9667218608745812052_-1_4102127_10cdh_513_6429BFD96672186071851502248_m_19_-4117847206946057835_888867___-1_29_46lk_19&filter=888867&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3953698&keyword=v4&campaignID=VEL-CVM&clickid=v1_7922068_210017_iv_98873C9A1F77747941733062184_-1_3953698_10ran_533_98873C9A1F7774793879097807_m_19_-3576150065641233721_812028___-1_29_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=v4&campaignID=AFD2&clickid=ABo2j6KD0wgAA_9Zy1Lp5T8PZ0dQSLvvC-Iv_c0lwUegAwAAAAAHAAE&filter=26701&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=90316402731&keyword=25027453851&campaignID=VEL-PPC&clickid=wE787SG1S5JIGO5SG2Q1KTBO&filter=1614287501995449033&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=ALowXtuV0wgAA_9Z2usU0X9Lixd-TJxRqKIBF4NmVZWaBgAAAAAJAAE&filter=690535&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4342617&keyword=1206327&campaignID=VEL-CVM&clickid=v1_7922068_210017_i6_F818174DF25405676236776994_-1_4342617_14q1n_534_F818174DF25405676168264332_m_19_5529045778342268457_812028___-1_29_48lm_19_&filter=812028&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_FR_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzc2NHw1MTAxfEZSfDN8MXx0bGNoYXJnZW1lbnRncmF0dWl0fFkyRnRjR0ZwWjI0Kk9UZ3dPVFF-YTJWNWQyOXlaQSpkTU9wYk1PcFkyaGhjbWRsYldWdWRDQm5jbUYwZFdsMH5jekp6KlpXVTBaVEZrTjJKaU5XWTFOREk1T0RrMVpqa3lObU0zTmpnM01tRmtZemN-WTNKbFlYUnBkbVUqTXpFME5EVTF-Wkc5dFlXbHUqZDNkM0xtRjJZWE4wTG1OdmJRfHw&campaignID=SNW&clickid=MzAjNDgxIzIyIzc2NHw1MTAxfEZSfDN8MXx0bGNoYXJnZW1lbnRncmF0dWl0fFkyRnRjR0ZwWjI0Kk9UZ3dPVFF-YTJWNWQyOXlaQSpkTU9wYk1PcFkyaGhjbWRsYldWdWRDQm5jbUYwZFdsMH5jekp6KlpXVTBaVEZrTjJKaU5XWTFOREk1T0RrMVpqa3lObU0zTmpnM01tRmtZemN-WTNKbFlYUnBkbVUqTXpFME5EVTF-Wkc5dFlXbHUqZDNkM0xtRjJZWE4wTG1OdmJRfHw&filter=215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_FR_PP_TAP_OSPCC&keyword=v4&campaignID=TAP-CPI&clickid=adkm_t-_8b-dfNENhj8BL52VIHjBDacF6dueSpxM1LNyHlpmfQBvBxrJEfEkE3e2pUGZqYhIHLDPaXRz3-DoeCF4Dfc2O4GKXi2T1WLx-cqH1RJb0o9r6tCx6axM6-e_TTXywpNL6FZOz0d0rb4BD5ja_LwNaibtu6c67Xluci-1YQ0L-tLhtbry7yDsnHqxHKe_9bn2c9lHFR4dqBcGaZfxJsAqBIRpda6lbbKww06mtT35ah9LrVWbpQUJLoevKvpRSjS7rVAQhtW2sOUf7Jrj0zBs9lp4hx_pd1y9ChEynED3q5kX_Pnsu9d5eKGONPJwuydaVpAIuVtUbhvbcTMNrZTYajZrBLJdhvwtZ3An2v9LTtBGdhuG22uvEW5Z0-C8Vu6Jv11kEX87QsbNgDvMfoshbJ6XcBb0bVpWCrrwKaSmz-DcrAhJfjmBWW0-IjIFUK5KMavnWH0WSkPIxrhk8f0I&filter=70678102&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_FR_PP_TAP_OSPCC&keyword=v4&campaignID=TAP-CPI&clickid=adkm_i4GLuV3RI1fjL-i10ERTSlKFcRPhHVa5RBfQGCzoWzAiz_ibOPqpTyiQXv4AmtYFOfvTxOpX5Ho-s4mMcLQPZl0iiZ2ygc2Gyc5Jbwy41rUCb6wbSxRqb6F092qhipl4BcuTXgpr12UdZtDS7ChcKoCxdInch72ERl03kGweSTJmnqNj3e6aJA_IqJ9pc2ygf_YQYUnRC7ZW0VFFTwuC2wjaXrZi1cPqgN1afOEAVkGfNmfqqy8msvNoOp6xTqN_0XBi-QNk75xlhrcgN8C8dK7IcKl5Xy5MHeKIrrZVrgaiOi6oiK6aGpYxHY72VKRZsJGKsxgaYbZ6qd6UolYY3cALSGOLVrVd7lUC-raoro_1S5bMZFyAb-ggCJuluOqRD65Hp13JAK8csFxw0lyrPkCa6M7T-2G78T9oOjbyjI3ypHFtM1Zt2KtgJzlbWzsPLJFpXTFK7g&filter=70678102&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=AGphOIFx0wgAA_9yVK0_km-ByK5DR76HnVra20aXjXjrAQAAAAAHAAE&filter=70236&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=AO5efp-a0wgAA_9yNXkQ8iMfOlr-T5YJVRonOv5SMaB9CQAAAAADAAE&filter=70237&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=AE6nuVp00wgAA_9yQxxTgSID4op6SaWtJQM3WWq_QFyGAQAAAAAGAAE&filter=681958&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=AIwIbulz0wgAA_9yWmpM_namB6uQRLfkJeQ4CWrZWu4_AQAAAAACAAE&filter=313215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=NEW_TESTV4BIS&campaignID=AFD2&clickid=ADI4YdSw0wgAA_9Zy1J2C9wVEGZFQZ0NpQ3LLcKMA2E0BwAAAAAJAAE&filter=313215&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=&campaignID=AFD2&clickid=ANIa3bqe0wgAA_9yWIV9mW7P-ImcQoag6wazDpfH1eDUCwAAAAAFAAE&filter=139066&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_OUTB_OSPCC&keyword=page3&campaignID=OUTB&mrmid=&clickid=&filter=4367245&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_AFD_OSPCC&keyword=NEW_TESTV4BIS&campaignID=AFD2&clickid=AMJccDfG0wgAA_9yM4SgOKxgeEDSSY3CU84f2n4IQU8aAwAAAAADAAE&filter=70237&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_SECCO_OSPCC&keyword=v4&campaignID=SECCO&clickid=06_28681695_670c537e-eb13-43e7-8f01-7fd3adff2094&filter=100045_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3953698&keyword=1076567&campaignID=VEL-CVM&clickid=v1_7922068_210017_iq_1616532572778401763634848_-1_3953698_10ran_534_161653257277839846435975_m_19_-6976940171079725372_812028___-1_29_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_SEO_OSPCC&keyword=NEW_TESTV4NAT&campaignID=UTL_SEO_OSPCC&clickid=&filter=&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_SECCO_OSPCC&keyword=v4&campaignID=SECCO&clickid=06_11635406_861f1b15-eb45-48e9-b466-0f36896c4826&filter=100045_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_FR_PP_SECCO_OSPCC&keyword=v4&campaignID=SECCO&clickid=05_85497829_a63e454c-da52-48c2-9f73-154df741391c&filter=100045_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4288507&keyword=v4&campaignID=VEL-CVM&clickid=v1_7922078_260127_3o1_11347C8DB3183076722956507_-1_4288507_r2qm_535_11347C8DB3183075216983965_m_19_7073963610736568124_907297___-1_4m_4q27_19&filter=907297&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3953698&keyword=v4&campaignID=VEL-CVM&clickid=v1_7922068_210017_iv_642C2A65EA26679721748627944_-1_3953698_10ran_534_642C2A65EA2667971984222138_m_19_9011266249886391715_812028___-1_29_48lm_19&filter=812028&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 414 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.