onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.
Publisher:
AVANQUEST SOFTWARE  (signed and verified)

Product:
OneSafe PC Cleaner

Version:
4.1

MD5:
4eedf890acc18fff7f75fad397c0d961

SHA-1:
798934d0038fc603b3707fabda07ade34ee0215f

SHA-256:
8de31af04088925463554fd1401fa2d39ea8ed809090c01e86755d3d721bd848

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/23/2024 10:27:42 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
riskware program Program.Unwanted.611
9.0.1.05190

ESET NOD32
Win32/Adware.SpeedingUpMyPC.AU application
8.0.319.0

File size:
1.9 MB (1,979,080 bytes)

Product version:
4.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
2/13/2015 1:00:00 AM

Valid to:
3/7/2017 12:59:59 AM

Subject:
CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:waazYNtLwPl0k97H+pxaOxhyZZLhmUoMOYDoJCsinXBg:9GYNtK0k1H+pxPhQkUZ3DoiRg

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 50 URLs.

http://webtools.avanquest.com/download.cfm?filter=906177&tracking=4288317&keyword=884778&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921958_190438_3o1_EFC68E15A1296296021783640704_-1_4288317_r01a_536_EFC68E15A129629601750473724_m_19_-455418712113898662_906177___-1_68_3qka_19_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4101587&keyword=1075047&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_206488_3o1_8031EED66671803311235058292_-1_4101587_10pr7_533_8031EED66671803301446154017_m_19_3054438176795349550_897237___1_1b_4bp2_19_&filter=897237&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_ES_PP_GO_SE_OSPCC_BAN&keyword=descargar limpiador pc gratis&campaignID=CONTENT-CLEAN-BAN&gclid={gclid},CJ296_rvic4CFciRGwodjPsCKw&clickid=&filter=6270354a7fe5de17.anonymous.google&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4199557&keyword=1163837&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7956087_190438_3o1_803883ED42268056769208509_-1_4199557_13ght_535_803883ED422680551386241783_m_19_4529114331814071777_906177___0_1f_3qka_19&filter=906177&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4288567&keyword=1075047&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_190438_3o1_4F4865C3DA763705664331868_-1_4288567_10pr7_535_4F4865C3DA76370551196911371_m_19_-274783225766495919_906177___2_1b_3qka_19&filter=906177&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=42080&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ALLWZoIM0wgADToAxP87SezRhsruToTa8FLe6kVDy5uBAwAAAAAFAAE&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=42077&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AOS3tt_D0wgAFV0Axdz7ekim7wBCTr9_8WCWQjRmV_mfAAAAAAAFAAE&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_ES_PP_GO_SE_OSPCC_BAN&keyword=limpiar pc cleaner&campaignID=CONTENT-CLEAN-BAN&gclid={gclid},CN3-09a_8cwCFQ8kgQodZpQJiA&clickid=&filter=minecraft.es.downloadastro.com&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AEY1zX950wgAA_9yNXkK0hIMqp23R6Tfo9PbCA0Kl4QCAAAAAAAFAAE&filter=29651&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26665&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ALJ13lG80wgAA_9yNXXs3C9xg3ydQLoZFxk2Rm06rslQAAAAAAAAAAE&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3951718&keyword=1205897&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921958_254097_3o1_15E1857C1331794982578084_-1_3951718_14pk9_513_15E1857C13317931067680985_m_19_-7064683844218637941_901067___-1_68_4o9b_19&filter=901067&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_ES_PP_GO_SE_OSPCC_BAN&keyword=descargar cleaner&campaignID=CONTENT-CLEAN-BAN&gclid={gclid},CLbSyvP3_MwCFfMW0wodPYIE_Q&clickid=&filter=mp4-converter.uptodown.com&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=42079&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AKSOfAC_0wgAFV0A1x_-4r2Ub30bSpyXTbSIHTLP-98XAQAAAAADAAE&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=764868&tracking=3951718&keyword=1145537&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921958_207927_3o1_6FEFBEDB9C16995003436936383_-1_3951718_12um1_533_6FEFBEDB9C169950021828160745_m_19_5005965394329239333_764868___-1_68_3ujg_19_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26665&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AKL3Ngx00wgAA_9Z1vkxcgHxXFHLQJRkRtDt77DjnaU6AQAAAAABAAE&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AA6wt19O0wgAA_9Z3MzF9XFzboc0Qoc0QMse7bo22uuSBQAAAAAEAAE&filter=26378&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4160787&keyword=1075047&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_260127_3ph_ABF69C1898238207958595863124_-1_4160787_10pr7_535_ABF69C1898238207957133997191_m_19_-1374743717235107995_907297___2_1b_4q27_19_&filter=907297&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4283597&keyword=1087407&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_190438_3pc_4EF715754A6125052461414188425_-1_4283597_115tf_533_4EF715754A612505245728773538_m_19_-6272761551348764803_906177___-1_9_3qka_19_&filter=906177&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=795568&tracking=4101587&keyword=1081197&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_249107_3o1_A59F68409D37514681581324707_-1_4101587_10vrd_513_A59F68409D37514671144964169_m_19_8788155954805679597_795568___-1_1b_4548_19&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_ES_PP_GO_SE_OSPCC_BAN&keyword=descargar limpiador pc&campaignID=CONTENT-CLEAN-BAN&gclid={gclid},CNbt-PbLlc4CFceBkQodWUwDJg&clickid=&filter=es.mobogenie.com&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=&tracking=AQ_ES_PP_MTM_OSPCC&keyword=ES_LP1&campaignID=MTM&mrmid=&mtmid=&clickid=20xadm24zBIk.trP3ts8JE1z.U3Q000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_ES_PP_GO_SE_OSPCC_BAN&keyword=acelerar pc&campaignID=CONTENT-CLEAN-BAN&gclid={gclid},CMOJpYXWgM4CFVWAkQodRlsGUw&clickid=&filter=sonic-generations.programas-gratis.net&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=810388&tracking=4280957&keyword=1082017&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_198338_3pn_C085EC85A17313482075104639_-1_4280957_110l1_536_C085EC85A1731347128828823_m_19_-6657399303514656476_810388___2_9_48d8_19&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26665&tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AAi7QkKu0wgAA_9yNXmvCdcboG7WSKyiN3Tk_bFHg3GhBQAAAAAFAAE&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_ES_PP_AFD_OSPCC&keyword=ES_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AAzPoSOh0wgAFV0AqyZgDXvkmqz0QpDvnlG1BKQFEHnFAAAAAAAEAAE&filter=42078&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3951688&keyword=1208997&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921958_213957_iv_2BC4F58B92865774966759524_-1_3951688_14sl5_533_2BC4F58B928657731809402984_m_19_1659552831117381115_820878___-1_68_4a3u_19&filter=820878&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_ES_PP_FB_OSPCC&keyword=Expert_Lunettes&campaignID=FB&mrmid=&clickid=&filter=page1&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=4101607&keyword=1075047&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_235647_3o1_7713D3BF836908732123299373_-1_4101607_10pr7_533_7713D3BF836908721108743374_m_19_5915271234502464050_874097___1_1b_4kv3_19_&filter=874097&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=895737&tracking=4283597&keyword=1239457&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7944807_262487_3o1_FD13CB10FB102869457175687219_-1_4283597_15qd1_533_FD13CB10FB102869456793160426_m_19_-2675643349027558265_895737___2_48_4hej_19_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=906207&tracking=4199567&keyword=1163837&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7956087_190438_3o1_D97FCF3C1D1396656202113230929_-1_4199567_13ght_534_D97FCF3C1D1396656191097006479_m_19_8545948027516837603_906207___0_1u_3qka_19_&go=http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 856 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security