home

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.
Publisher:
AVANQUEST SOFTWARE  (signed and verified)

Product:
OneSafe PC Cleaner

Version:
4.1

MD5:
b071f5ef8a2b8ec2fe8ff81d9925edbc

SHA-1:
17d8afd28e4bd9a0b8bd0f9802a71e59a72bedce

SHA-256:
dbc998ad639e880097c11e8fe784fd7e7ceba67bf2b2d28edcff9bb72cc39fcb

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 7:07:27 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.7237

Dr.Web
Program.Unwanted.611
9.0.1.0272

Malwarebytes
PUP.Optional.OneSafePCCleaner
v2015.09.29.03

File size:
1.8 MB (1,852,992 bytes)

Product version:
4.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature
Signed by:
AVANQUEST SOFTWARE

Authority:
Symantec Corporation

Valid from:
2/13/2015 1:00:00 AM

Valid to:
3/7/2017 12:59:59 AM

Subject:
CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:m2Q1lQoc07o/KFNmjnIGKPYos674A8rHSIDBtb:fQ1GocXemjIGqYoT74ASj

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 40 URLs.

http://webtools.avanquest.com/download.cfm?filter=&tracking=UTL_UK_PP_PERION_OSPCC&keyword=EN_LP1&campaignID=PER-DIS&mrmid=&clickid=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70174491&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=rcvl1nUud3MPgH6y4cbTEz2uJ64EFCXt2ferGfTotNY_K3GrB-dlkK5kOEbP_GwNOBZZYr2pphY28nhif44Tb5BABKGziDyNTGXr51UhdYWCX-BH6AcHFo8stCzysPVKBn8xTG1MTtE_nMgX95cIkWfH9my-MIbMEp2pGH_Z9XtHxfOXq5vpLrqRZgYlNNvyaQ4_CAyegv58AWlT6S5sewOqLtC14QpXFC9K3v4LNyu91vE04W6f9LC127eWtq1GgAQL9RKZyWe8Xniz0LgFalqDTEltyCJy7HxOXcHAe1T0sMQntdcMlKTgR5P2p9XqP20ihkJLAwAxuN1HTQp6wcUaKRF-Lqo3Tdpob7I0trASjTiypS--GLRzlqxS_2nVri-QVBHQjuIb4J5VgY48Ht0LQKSFw4RGKNdj5gYC0caS09xwmvs&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=39902&tracking=AQ_CA_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AMDhoRTM0ggADTqwPV7FO2ZEWjlYTqMJTDXOMseJkyLpAQAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952338&keyword=885188&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_200698_3o1_3075E5197C8200601326383442_-1_3952338_r0e4_513_3075E5197C820059625504655_m_19_-629027607034278117_746178___2_4k_3qka_19&filter=746178&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952838&keyword=897288&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922038_163528_3o1_6FC9A39923983321389921837_-1_3952838_rc88_513_6FC9A3992398331871270757_m_19_-3049931832835648784_804348___-1_6e_3qka_19&filter=804348&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_AFD_OSPCC&keyword=NO_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=AEYfaYvZ0ggADTqyHOBmstEr--2WQrFnfQgGk_pSGusHAAAAAAA&filter=26395&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=27011&tracking=AQ_CA_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AA6quXne0ggADToAwCXlR2hlTGVDRb01uu07q5MhvQtnBAAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70174491&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=ZkhgvfxPNXMzQN6WBfyBHGFY-ooTZFYTHNgr-1ZozrcChJPlCEnbKx3RH4VjBzHm6ANPKnVO-tuBJHcpYvVFFyB7yQcLTJEZ8Mg_1jHWMtzdssDuZWuo5lr83KbK2blr-MY2yfgoml6xek3GczDrX7uQ0uwbXIKbiwS9sp5Fak5l7FzKvDsSq_evnYPKSXgnNvJAq-_zUKc4hUXdmof6exF0a-oauJiXpkfSe-gcm4YFV2boWVul4r9Ktfi9y0BP0OVxks-8So_6AXeLni7nXpWBk6ELRgLsLdWcE4VbhhDzT7hZlB98WvW74XYhvLbU2l8uCENzTt4M3e6wCcZei8rj5JkDU8ywC8IBla_ISPI84sK-M_2nf9EbmWKBDzFJdxxH7-O5-J03dby9EB0ZkPqVGrMKrVbZ2Ls1orQrNBOYn1j_jvtr2TuOp8kZ2N1q_VHB4v14FYyJ0Jg&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952808&keyword=897288&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922038_163528_3o1_CDB9E87F4B329522424211634_-1_3952808_rc88_513_CDB9E87F4B3295223549137272_m_19_-75358613152683207_804348___-1_6e_3qka_19&filter=804348&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_PERION_OSPCC&keyword=NL_LP1&campaignID=PER-DIS&mrmid=&mtmid=&clickid=&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952288&keyword=886008&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_195608_3o1_9185C0DFF91094236119316026_-1_3952288_r17o_513_9185C0DFF910942351210391181_m_19_-1726840909054768782_804428___-1_4k_3qka_19&filter=804428&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DK_DAN_PP_FB_OSPCC&keyword=Vendeur_Informatique&campaignID=FB&mrmid=&clickid=&filter=page1&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70006486&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=sI9VDrauWsAVDFn5G7SFpgDssEwGFWXL8QFLWG_hBQnUFvBVd-ysUqw9a8l2YQg8-hODXRKPin3gB3m8E8F3ib0ShEMgP6zuXy3SAWtoQFqXkLmdPf6wwwNn3miYc9FQxvTuPOQM5Jfz5uTRJ3THKBriN0Rxwktcu0FGb0jUIqnl3s4ThiPazkT0Ze7QX6_8xAfL05F_xoGBkNz1CHYk0s-45dZkZwJRLdVmjaxxjkJ6m778OqVtXogtndykTPC-MxTIQ9xi9bm6EB-orYW9cQpzfK9rb2kA2-0OhSLTLWGXU10aMC--YJvtHJBH75yGLLwYx4Iq88_ReJfsiyfEctjhxY4qbTro2xkFeNZZF5bPvwe2402g9sAHt8iCEJYrs2ZrIrFKflxXMb1A1oJDGIAkFvHjZmZnxPC-0ynxwtnvGYbjqt7pfitw9eyf-vKJYahDkJH47qH7P8K27MCA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70268949&tracking=UTL_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=B-vkttDpD6DepZCgGfvpwgbQvFn6gCE6qYJhhrUZcxN6KO7LhHmLGJ1Biaku5SrwzCVS0wqOyxmkj-DtdVrsop-06uddCM8X4wvp55I8fgHWqbi4mOD-IbD1NN5RcNKszEQ6iu0DhONH8FKCxpPnZjoz0GXbtfPLrKNca6x-rURx7KW1Oac7wcp9L85Fd2smm-FAhUWoNuhqVQgU-Z0mU2Azld5iLqD8eucdrlgNIqJy5zBG9ugxI5AKmBIvSRQwXjQJcivddBjEX_E0n71NA8OVdkX2SGLZRIYIb7QZ6h3SpBlFpDduLzhh7BOE_ZkObvtJIMHLcbW61SBMpSFMa-8wsCksXnWyUb_qV46RQkaiupURv7ed2AyzBDeMSlBhkZ3yq3sgH-NspIcSFoYw61R9IduuKbxsT_UGYZ7WYetYljllOhYsGq3KBRBH-0Ig&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70268949&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=qKdinpbNqHM_LjhDN9jsYoYhw5czgaT7oKT5jfh_K_AvFiAoSsDfTH7Uk5x0OROPvT50iXYZ28Ea-G5aRj1baVNdKwKouPBwLc7BkweKFPNcCOORUXO8rQMyoc5782iLk0Vn2qRm75C3WRIMxh7spklXIyd_CVEKXqBCFAthsRISuQbkTeXR3LxEzCEB6GtMsOQ8728llcCJpRx8e7IljS0hhwkREjkzhq1drHGfXvXnymlV1f6O2-awQPFHNpvetYAnMBD2DHqJ0IrjPwTnYZ5a_JcsjZtsnGuLKSjcCVynQJNA2_EiVxzIoXuyo7D5Df6O4JJoSFsupQKrFnJfOHDz5wN5lAdggPcM9iGy2ZPhzvV4goimFbbgm5Viq4cZkHeLyy1rUXiM89_IgyfECPr72K0NbOw2-AF9UUhGDuKswiVL7SXn5ZINzVkIM25DFE4x2u2L3a_my6gAZhk&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3951998&keyword=887568&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921978_190438_3o1_7FEFE77387173422903492252_-1_3951998_r2og_535_7FEFE773871734211017556285_m_19_-5806253161817856800_794508___2_1q_3qka_19&filter=794508&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952368&keyword=885188&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_190438_3o1_ED22B3ECD84146788459072_-1_3952368_r0e4_533_ED22B3ECD841451225562495_m_19_234595661812478485_794488___2_4k_3qka_19&filter=794488&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_EN_PP_TBL_OSPCC&keyword=eslmedia-theindependent-whitelist&campaignID=TBL&clickid=&filter=page1&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70316877&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=lnL-oNhlhluiU8h49yvyb5L9MXgCgSFW_X1xuN0pUBNu1R8ygKivyOOWq6Lh2veqwFW3K2wdhZyqX2B60T080V_HwiL4mgbM1UdoiVsgB-AGGfnVPAvMaLvWIi-iQDKV2DXwd1ZJUqiACOogCy729YQGGPuSZsRtiN4DKbvg9jmlkbMGyMk3SnHPWOvK-mXCgStMD00UbdXQ8Mq-enZjJ-hfY7ddV4yivfwRL04OVwaRbisKytis5L2BilAkc6qqK55hEOcGNlple3j5UvWdRf73heH4YqhCZJd_kECSfNNuBbbexhWzCBbbyplzjvgi7Oz4xHO0JPfTLR8t-KuFrlfN9cijIBK3lDeYJZmk-hRrzazb2s6RCwVJcPIvMlpoyQT4pWieSM657egSX6F70WDMkuSnW2I6EITbj_X2W1kDeZf9tPQ3nRdYFgNTavynHkI&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=50689&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=ANClgPfM0ggADTqx91lj9Ub9OY1HRIqcrXKCPnAEXnkAAAAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_SECCO_OSPCC&keyword=SE_LP1&campaignID=SECCO&mrmid=&mtmid=&clickid=10_66861722_b98cb0d8-1d3f-43e0-b1dc-f32549a4b32d&filter=100045_&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70006486&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=PjKOAHJ41sYXkmGHAPvRHVIbOGhJGQwkgfsukurGGdsa7fAhnfeqoOSeFBLnGB9ydzLiTCGNLagWcjWELX6kPRAK8vtV7vUFhITHR5sBqJixMDaP44_6L9t-8KnVnjveRTwn2t66W8Qpnqw1W1Jp71l5_OPFcHmpzM1CgxFvj3tQXcWFZPhpXjuj6kKWpjdt26QoolwTIGyjDTVhJS_F9p0VC5Z4N0qi8qlThYhy3gAAAC3vgjId90uVhrnqldgnyGQ9GyB3dhFascCOsc7bRiviFcawmln5tnVXPd5Os72LhbuoRzr_MqReYwokAiEvdIL917W4vKu93yD7y-vlnJbRuV57E_u80p3-jjdR6tiBinU9WO5abY4kX0tNBexqsEhH0qZoGXJne7fByxqBbLQvEX_30WgK36y1ae_SkWzD2N_CALfBzM1uG00hU2Jf50deD2PkM31jfzfGdiPmA6i3L9O_JlsDZDoo&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952338&keyword=885188&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922008_200768_3o1_3D2E50EA4228570700939145_-1_3952338_r0e4_535_3D2E50EA4228569335787759_m_19_3949225871847709230_746198___2_4k_3qka_19&filter=746198&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=&tracking=AQ_FR_PP_PERION_OSPCC&keyword=EN_LP1&campaignID=PER-DIS&mrmid=&clickid=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_SW_PP_FB_OSPCC&keyword=Vendeur_Informatique&campaignID=FB&mrmid=&clickid=&filter=page1&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_AFD_OSPCC&keyword=NO_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ADxlyFDi0ggADTqwQp4I9jwg-eoUS4SJgx_AWwenhLbmBgAAAAA&filter=52322&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=751288&tracking=3952688&keyword=884798&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7922018_190438_3o1_94228EE7A81469802801290042_-1_3952688_r01u_534_94228EE7A81469801368021087_m_19_-8397039085403128539_751288___2_28_3qka_19&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70174491&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=p5cJ35P_oMXBzm4wNb4LKBMmLD3QR7VkzjpAdMk7ZjdLzHyio_6K229GKvlDrr_xv_KO0ceKkN0lT7rIcKx7eBg26VNSGfWM0W3kX1pZkloKMU4jgfE7GdXeSWJk4GhzTbYU0oY9xzkQ7JNjBX_tq1jf6vVxo5s0WEiIQRAeBoR5oEPm40hfDAoVdiTQcrQ3gLwoQH9x0kwZuZNyUk84QikGSqv-MQXEUsEp8LI69J1kMvmwRsLQC7waL_IHXYY7oeWXueE9NVINWjPTMEdAJ5VBE1bU-BHRW0oDHqiXpb0nuA9lHS-DTKokAlA--Clc9F2Lki1wdlJ4bK604mAe4ed_A018Lnt6CLTfYPmn17f7L_ubxejW5luWbbEB5Zp-PeAILXj0JSfggpXIdAF2hLF3kj0BO-PF7GaBVR0&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952028&keyword=887568&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921978_194518_3o1_2F3CA7DE2E2184341866314417_-1_3952028_r2og_535_2F3CA7DE2E2184331553948012_m_19_7667875529182861163_801658___-1_1q_46m8_19&filter=801658&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=3952008&keyword=885958&campaignID=VEL-CVM&mrmid=&mtmid=&clickid=v1_7921978_163538_3o1_12DB2BDC59950941062239257_-1_3952008_r166_533_12DB2BDC59950931381330955_m_19_5432554819622085137_804398___-1_1q_3qka_19&filter=804398&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Latest 30 of 40 download URLs

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.