» onesafe_pc_cleaner.exe
Overview
Analysis
File Details
Downloads (50)

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.

File name:

Publisher:

AVANQUEST SOFTWARE (signed and verified)

Product:

OneSafe PC Cleaner

Version:

4.1

MD5:

3b2ff3469fee0b23986b7689e6ac82b2

SHA-1:

758d9eafc297d0dc8cce2e3e0aa01df03879b455

SHA-256:

4e809b7a81b41cdfd7388bb749e5b05b1a903b891dc590aba277436b0c83258f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 10:30:04 AM UTC (today)

File size:

1.7 MB (1,814,744 bytes)

Product version:

4.1

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Common path:

C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature

Signed by:

AVANQUEST SOFTWARE

Authority:

Symantec Corporation

Valid from:

2/13/2015 1:00:00 AM

Valid to:

3/7/2017 12:59:59 AM

Subject:

CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:vam+mzQmX0T/wS4rvPIiVKc6PzR3E1w1inXBgh:SazQi0T/MPWPFU1wcRgh

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 50 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_SNW_OSPCC&keyword=NDcjNDgxIzIyIzc2NHw0MzYwfFNFfDN8MXx8Wkc5dFlXbHUqY0dObWIzSmhiR3hoTG1sa1p5NXpaUX5kR0Z5WjJWMCplM1JoY21kbGRIMH5jekp6KlpUUmhNamRoTkdRNU5tUTJOR0ptTnpsak56bGhNelF5WlRnME56QTBOV1F8&campaignID=SNW&mrmid=&mtmid=&clickid=MzAjNDgxIzIyIzc2NHw0MzYwfFNFfDN8MXx8Wkc5dFlXbHUqY0dObWIzSmhiR3hoTG1sa1p5NXpaUX5kR0Z5WjJWMCplM1JoY21kbGRIMH5jekp6KlpUUmhNamRoTkdRNU5tUTJOR0ptTnpsak56bGhNelF5WlRnME56QTBOV1F8&filter=215&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199767&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_244217_3o1_2ABA8D9CA612792021546100177_-1_4199767_13gir_533_2ABA8D9CA612792011842586684_m_19_7086022304939755082_858007___2_4e_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199757&keyword=1164337&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_4A613BAD3F1848436707302545_-1_4199757_13h1h_533_4A613BAD3F18484352066806288_m_19_5069424513581151927_858007___2_58_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=795568&tracking=4199747&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_003D90B487672925277625_-1_4199747_13gir_533_003D90B487671617160554_m_19_-847656190500609848_795568___2_32_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=765068&tracking=4199717&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_175358_3o1_EC4F63A4692924946440933173_-1_4199717_13gir_522_EC4F63A46929249451956725404_m_19_-7281301357390442742_765068___2_30_3ujg_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=828407&tracking=4199737&keyword=1164337&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_207588_3o1_3145A9BFE620800661159416559_-1_4199737_13h1h_533_3145A9BFE62080065171826598_m_19_-7847437890233166493_828407___2_58_4c4k_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=794438&tracking=4199697&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_190378_3o1_8B22D4139816733421944489042_-1_4199697_13gir_533_8B22D413981673341515507143_m_19_3272990790477404899_794438___2_7o_44tm_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=794438&tracking=4199697&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_190378_3o1_616DE0C46417532062071083548_-1_4199697_13gir_522_616DE0C4641753205712645034_m_19_-4049273812226672571_794438___2_5a_44tm_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199767&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_A68B698E3907106894562792_-1_4199767_13gir_535_A68B698E39071051894510201_m_19_9116206343863551428_858007___2_32_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70259&tracking=AQ_CA_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AJRd6rg00wgAA_-LMpR9-TbZrWqvQJptW7k6JUzKrwAYBAAAAAADAAE&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=795568&tracking=4199747&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_1202DC9D59254801209846946_-1_4199747_13gir_533_1202DC9D5925479124889534_m_19_1757374203532284928_795568___2_32_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199777&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_244217_3o1_B8BC55E5D413173481911274423_-1_4199777_13gir_533_B8BC55E5D413173471586544989_m_19_3502017108482172683_858007___0_7o_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=&keyword=SE_LP1&campaignID=&mrmid=&mtmid=&clickid=&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=828407&tracking=4199737&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_207588_3o1_428B043C313291761103836951_-1_4199737_13gir_535_428B043C313291751267045415_m_19_-2485418233293670131_828407___2_32_4c4k_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=795568&tracking=4199717&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_244217_3o1_8938E16A61214956824255050_-1_4199717_13gir_533_8938E16A612149551364576522_m_19_-8517603527811614722_795568___2_32_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=828407&tracking=4199687&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_207588_3o1_F2FF9A6EE81319701493233903_-1_4199687_13gir_533_F2FF9A6EE8131969187711310_m_19_3694193466482684242_828407___2_32_4c4k_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_TBL_OSPCC&keyword=msn-netherlands&campaignID=TBL&clickid=&filter=page1&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199757&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_67BBA213D4595081612300723_-1_4199757_13gir_533_67BBA213D459507842533490_m_19_604314375601149923_858007___2_6k_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=876297&tracking=4199727&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_211937_3o1_173F3DCD41273046512635791_-1_4199727_13gir_533_173F3DCD41273045735962884_m_19_-2279102678705853818_876297___2_32_4bkm_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70619918&tracking=UTL_EN_PP_YEP_OSPCC&keyword=EN_LP1&campaignID=YEP-PLY-EX&mrmid=&clickid=lbQX8_waQXyHHudVfCoeReCOxGaKx4ohprcPqKi3C2nwpQDjyYbtMPhBOsrx2WbNCeEO77O15teAhDQcQA31f4e7Ce__211QHYL7Fb6SUiAtdV3vO7ktan5wO-doUTxkYSGg2-N9xNkarL3Bb3j8uv-dRZbER0T2mppW8Ucp5SebBsP4GMKVoDVVNH3bYfCkHF1RmQ-5dxFzDolHdEWdKShz6cc4fXZddOp9o71bu_SEH2QyJNY-ptm-89uuibYc7-TBcJIaCvfwdDI2Ke0lLg1xEZXTUL34dWNHbc8hl3gF_SgqOlsoae0624yuuZVQDXQXEQsgrlKchcjwbLiRx2JmtyZ76yQkND0odeKMsjMQk4w9xCkUFyX8VG0b6U5ua-qShJi0TEcrRDMZ7-fd8nuVRftDtFNexwk3Y7aJHcNNp7bxI-aRdnKuZMQQrxYLFQ&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70243&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AG5McgAz0wgAA_9Z0SoXtQHF5VIUQ4Gd1HTG5YW0Q-SkAwAAAAAHAAE&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=886527&tracking=4199717&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_230467_3o1_54C1E185896624682090306632_-1_4199717_13gir_533_54C1E18589662467242037422_m_19_-2290840286963208286_886527___2_0_4j8n_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=828407&tracking=4199717&keyword=1164387&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_207588_3o1_4E23F0C44B301312758989489_-1_4199717_13h33_533_4E23F0C44B3013111994822798_m_19_-5784210103867272958_828407___2_7a_4c4k_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=176681&tracking=AQ_EN_PP_MTM_OSPCC&keyword=EN_LP1&campaignID=MTM-3&mrmid=&clickid=213phd000000000.3gLJz61AvJLO000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=764618&tracking=4199737&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_175358_3o1_993B8FE65022361062021282281_-1_4199737_13gir_533_993B8FE65022361051638395956_m_19_-1797031475289635908_764618___2_36_3ujg_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199757&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_226127_3o1_93933361010858282001971984_-1_4199757_13gir_533_9393336101085827711895855_m_19_-1280162297831262501_858007___2_32_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=852737&tracking=4199707&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_223237_3o1_741F79E1A0534850505077329_-1_4199707_13gir_533_741F79E1A05348491564143420_m_19_-6080109318955224009_852737___2_0_4h4j_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=858007&tracking=4199757&keyword=1163867&campaignID=VEL-CVM&mrmid=&clickid=v1_7956107_191158_3o1_651532435494626563684190_-1_4199757_13gir_533_6515324354946252083534731_m_19_-843803433764551540_858007___2_33_4548_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=176681&tracking=AQ_EN_PP_MTM_OSPCC&keyword=EN_LP1&campaignID=MTM-3&mrmid=&clickid=213phd000000000.26Xqv21Av7I9000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=176681&tracking=AQ_EN_PP_MTM_OSPCC&keyword=EN_LP1&campaignID=MTM-3&mrmid=&clickid=213phd000000000.0KHP8W1Av.Tq000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 50 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.