adwcleaner.exe

AdwCleaner from Xplode is a free application designed to search for and remove adware such as browser toolbars and other potentially unwanted programs and specifically targets software that is bundled with free programs that you download from the web. This is a setup program which is used to install the application. The file has been seen being downloaded from telechargement2.pcastuces.com and multiple other hosts.
Version:
2.3.0.6

MD5:
4c47469f47fd9f8437b62a86f6e0874f

SHA-1:
e123ceb89a4e0b379af014d489c2db123fc70867

SHA-256:
37378b4bda3d8fc8238b3baec7dc989851796c1a940c81f629bb4925895fd4ef

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/25/2024 10:34:15 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/Undefined.Threat
v6.4.7.1.166

Rising Antivirus
AU3SCRIPT:Dropper.Insrun!1.9E21
23.00.65.131216

File size:
651 KB (666,633 bytes)

Copyright:
Xplode

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\adwcleaner.exe

File PE Metadata
Compilation timestamp:
1/29/2012 11:32:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:m6Wq4aaE6KwyF5L0Y2D1PqLG5CrD1t1eXcKlVGNKIUzJbAQ:sthEVaPqL/rhtIXHWNKndT

Entry address:
0xB5E60

Entry point:
60, BE, 00, 40, 47, 00, 8D, BE, 00, D0, F8, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
268 KB (274,432 bytes)

The file adwcleaner.exe has been seen being distributed by the following 50 URLs.

http://telechargement2.pcastuces.com/temp6bs2/.../adwcleaner.exe

http://download.bleepingcomputer.com/dl/a725e22453e1a329581805d80ee31b3b/51f04c9a/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/1cf175ddab0dcea08b4b6f15a9e98179/5203f7cd/windows/security/security-utilities/a/.../AdwCleaner.exe

Latest 30 of 60 download URLs

Scan adwcleaner.exe - Powered by Reason Core Security