» adwcleaner_5.031.exe
Overview
Analysis
File Details
Programs (1)
Downloads (672)
Network (3)

adwcleaner_5.031.exe

The executable adwcleaner_5.031.exe has been detected as malware by 4 anti-virus scanners. This is a setup program which is used to install the application. This file is typically installed with the program Toolwiz Time Freeze 2016 by ToolWiz. The file has been seen being downloaded from toolslib.net and multiple other hosts. While running, it connects to the Internet address front3.general-changelog-team.fr on port 80 using the HTTP protocol.

File name:

Description:

AdwCleaner

Version:

5.0.3.1

MD5:

3d189a519f39ab0cdafcacab527c42de

SHA-1:

fc206dd4ac0f8579ac14730fb0d82476b78f6afb

SHA-256:

97b725460d95e4b466134d75745f5b9c66113da11670c855c5f93cd3d67ca6a2

Scanner detections:

4 / 68

Status:

Malware

Analysis date:

4/25/2024 8:10:32 PM UTC (today)

Scan engine

Detection

Engine version

AegisLab AV Signature

Troj.W32.Agent

2.1.4+

Bkav FE

W32.HfsAtITA

1.3.0.7400

ESET NOD32

Detection.Undefined

7.0.302.0

Qihoo 360 Security

HEUR/QVM11.1.Malware.Gen

1.0.0.1077

File size:

1.4 MB (1,507,840 bytes)

Product version:

3.3.14.2

Xplode

File type:

Executable application (Win32 EXE)

Language:

French (France)

Common path:

C:\users\{user}\downloads\adwcleaner_5.031.exe

File PE Metadata

Compilation timestamp:

1/25/2016 11:57:06 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

24576:44GHnhIzOaGV2dw1FvhV5Bqpl4STyEcP5a+VjCE1sxyQ2BTYMNfr:PshdaGVJFvhVepCSTyEu5a+Vj51sMB8c

Entry address:

0x1F1B60

Entry point:

60, BE, 00, C0, 59, 00, 8D, BE, 00, 50, E6, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

344 KB (352,256 bytes)

The file adwcleaner_5.031.exe has been discovered within the following program.

Toolwiz Time Freeze 2016 by ToolWiz

www.Toolwiz.com

About 4% of users remove it

The file adwcleaner_5.031.exe has been seen being distributed by the following 50 URLs.