» adwcleaner.exe
Overview
Analysis
File Details
Programs (2)
Downloads (270)

adwcleaner.exe

AdwCleaner from Xplode is a free application designed to search for and remove adware such as browser toolbars and other potentially unwanted programs and specifically targets software that is bundled with free programs that you download from the web. This is a setup program which is used to install the application. The file has been seen being downloaded from download.bleepingcomputer.com and multiple other hosts.

File name:

adwcleaner.exe

Version:

3.2.1.0

MD5:

70f851f7a524071e13f17dc401a21906

SHA-1:

237c123afc52010ee215bbcb4ccc22e02365acae

SHA-256:

1e638d817f07828ffc329a292e66a74077ae646b789f7b1ac70e3944a0599b22

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 4:24:18 AM UTC (today)

File size:

1.3 MB (1,326,389 bytes)

Product version:

3.3.8.1

File type:

Executable application (Win64 EXE)

Language:

Francese (Francia)

Common path:

C:\users\{user}\downloads\adwcleaner.exe

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

24576:/thEVaPqLG2dwBULCZDukoPz4REcoW9cU1fB6ws7GkyI/CV/s+x:DEVUcGlU/koPEREc+a2qTUS

Entry point:

60, BE, 00, 30, 48, 00, 8D, BE, 00, E0, F7, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.9867

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

The file adwcleaner.exe has been discovered within the following programs.

Autodesk SketchBook Pro 7 by Autodesk, Inc.

www.autodesk.com

1% remove it

Recuva by Piriform

Recuva is a data recovery program and is able to recover files that have been "permanently" deleted and marked by the operating system as free space.

www.piriform.com/recuva

8% remove it

The file adwcleaner.exe has been seen being distributed by the following 50 URLs.

http://download.bleepingcomputer.com/dl/d6f6188e7d171168f60a5f8d8e387e05/537da96c/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/cfed5b48da9ec006230c5dfc38236437/537de710/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/2ccc4b18c5801d4c41024c0ff2fe5957/537a7144/windows/security/security-utilities/a/.../AdwCleaner.exe