» onesafe_pc_cleaner.exe
Overview
Analysis
File Details
Downloads (27)

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.

File name:

Publisher:

AVANQUEST SOFTWARE (signed and verified)

Product:

OneSafe PC Cleaner

Version:

4.0

MD5:

2074b7475fb2766e652b50dbc9539d62

SHA-1:

3e61a5febb2d8a5719b64fb1c054dc4f4a1eda1e

SHA-256:

fb8a855254b0914886e5331cb31cf8579a7b60ba1f4c1aaa8c3749966cd3cee5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 11:03:56 AM UTC (today)

File size:

1.9 MB (1,963,296 bytes)

Product version:

4.0

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Common path:

C:\users\{user}\downloads\onesafe_pc_cleaner.exe

Digital Signature

Signed by:

AVANQUEST SOFTWARE

Authority:

Symantec Corporation

Valid from:

2/13/2015 1:00:00 AM

Valid to:

3/7/2017 12:59:59 AM

Subject:

CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:M2h47CZrjC39Ndvx9ZtpXrsq7BPaHq3CT00jn9IreE0zCOkL6K/tj:hh4kCLJHHjFiHqSISIreE0zCVl

Entry address:

0x9B24

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 27 URLs.

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_MTM_OSPCC&keyword=NO_LP1&campaignID=MTM&mrmid=&mtmid=&clickid=20IE5Z4gZ.B1PWLS1qpJl11z.sOe000.&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_YEP_OSPCC&keyword=SE_LP1&campaignID=YEPA&mrmid=&mtmid=&clickid=fra1CKT-rMfBoLCkFRACGKHb2Pyb4I2HZyINNDYuMTk1LjQwLjIzMSgBMOezhqwF&filter=4569803_http://i.rafomedia.com/a?size=336*280&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=64071084&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=GA4_xZyk74D6WWKCu7koTSh2jrllIpHRYa0UVWhXke4xmv3r2ILuiemMBazJhQiD9Cv6R9eTJjOFv2t61pE8Ty35N7mp1XIZddoBKzETvDwyFpUKAs9Z2lrocF_mad-vAHKLG8foJXSBn581mX4vx3c6jQLq100c5mXJQq_X_nbTlckM5MCg4beX8JFdkGUyNCPdQQbCYysqdBk5761OgiLGBF1lSQ1wQ68AkWCeHUdkmladiN5ahxZOSDYUM0qZlfwKRXGG8OwOEf_6fLczuFb08zN_20Fdpec8g5e745P5x8uI7g6ZmN84nCyCIRZUUgc4fQq2xEaGjP3JH9nmnGju7YlNfAxmUZuG_mDh2Lwb0xpeOTN2gy4Qn5gI8LnVerKvr1r8sND8v9C6BmogJQTu9PayFoJJgtDMwlABNSgGavQYINJu3taMPg&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26911&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AGTBOG130ggADTox_8Fj4b3ueOG3QJmZaUPa32Ubnn4vAQAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_EN_PP_FB_OSPCC&keyword=Vendeur&campaignID=FB&clickid=&filter=page1&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26911&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=APwCAwF80ggADTowbOLs2QZ6CZ45T5fTZmp-EUel1s1NAQAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_MRM_OSPCC&keyword=NL_LP1&campaignID=PLYS&mrmid=&mtmid=&clickid=1QlW1i2iMxbjCoL2VQb2UBpLvfBU3KvqUIiJlziklDNj3o4baXNVm5XflBh6jkJ_rDVwuXD_NPQfpMUCpzbSmV-6D4lAKxfwSsVW7sMxJWROt8aqz8S0tP4M9CQl8Dbv3XMlVl6jTeYHA2wE8uvL0fP8UvZbUv3QScPYxiZNgrtWb4mwYMUEzhYP2QfRUzAcAwyVwOzjzLYE4D0RQHi9VT1bSr_Yu5DInvJ5mZYjSYUJw9liMQTxACJXNexGV-fsT3s-fEvz4BR4ArblRP6E8V2uEDTS7UVsTBq9RHVyHU713rTEvQy4jG9CgFviXJQzyfSRKmz_jKOvaxxASXv1BLtzJUEYnKFsO7FYtauWLoIQ_g6PYwatKqSN9YDMpQhnjgqNLigu69dwEdD06gAjCW7F7nOw1_Oa3LllQnfWXUcPOFDIC_5Oj_k2ZiDcOB2HI9JcycteS_Olcg&filter=40921455&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=30679&tracking=AQ_EN_PP_MTM_OSPCC&keyword=EN_LP1&campaignID=MTM-3&mrmid=&clickid=20XAWb0TIlxlo1tp1v8jxW1z4uvX000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DK_PP_MTM_OSPCC&keyword=DK_LP1&campaignID=MTM&mrmid=&mtmid=&clickid=20IE7B4Pw.3.UQjw1wEUgG1z2GB.000.&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DK_PP_MTM_OSPCC&keyword=DK_LP1&campaignID=MTM&mrmid=&mtmid=&clickid=20IE7B2I131zOzOk02KZ3m1z1CmY000.&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_SNW_OSPCC&keyword=MjU5fDQzNTl8Tk98M3wxfGRvd25sb2FkfGN6SnoqT1RVeE9UVXhZekkzT0dVM05HWmtObUUwWTJSbFlqZ3haVFl3WVdFeU1ESQ|ac79fe389d260e5cf45483ca1b974aae-47-481&campaignID=SNW&mrmid=&mtmid=&clickid=MjU5fDQzNTl8Tk98M3wxfGRvd25sb2FkfGN6SnoqT1RVeE9UVXhZekkzT0dVM05HWmtObUUwWTJSbFlqZ3haVFl3WVdFeU1ESQ|7cad93b3b1915f659eb954a513c84f70-30-481&filter=47&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_EN_PP_SOFT_OSPCC&keyword=EN_LP1&campaignID=SOFT&mrmid=&mtmid=&clickid=&filter=placementname&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_MRM_OSPCC&keyword=SE_LP1&campaignID=PLYS&mrmid=&mtmid=&clickid=RoV9-drPx9WzD5DJEWq0NbxMshEZCW-ioPE-5e8d_KJ__IVRlTKV_ZVjhMCBpxJjHlk8eW-pl6PVuEV1xNbHyOvV7JgnyGZ3GggpHXRAtVNExHUxEieRmY2PxjJXHRw39dd9Tc3kn9GCRzD3f5uVpHriW4_MlJSnPJN7Bw-XxqvoTkRLksLUIoZWHcd149YM2bmqKFrvlG5H9AXGdD0TOq0MC3ZP8345v2Cor1sNxTWBOLQHQK64TCXeeVf_CSz7AdIt3FyACG4x50W-v5jkKGPKF0Gr5cnP1lpe4K1WLsx-gDSwpLO0iUegShCD5MT3nLn-oGd-3K4djySxMKlk8zZqmXilbJ_ZyWaweuCSjS6jfQNDS0ppSO7kIWM56uvnmmDzskkUVkVLgPBffvwOJ8KK-AbhYZX0STtAP1xjK36Bnfc&filter=64061621&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_YEP_OSPCC&keyword=SE_LP1&campaignID=YEPA&mrmid=&mtmid=&clickid=nym1CMPxlKzjtOCOHxACGLSQq6eKy_nFaCIMNzguNjkuMTcuMTMxKAEwy7aXqwU.&filter=4615453_http://mystart.incredimail.com/?a=1eyorLrCay9&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=66181011&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=oHIqrvmRx3L65sHRTwS5TGXN2UjtZm6OMIPFYRK0HvU9A-Ly_3_TvuQt4FptzOljzJpEBlx9ixAI8w7WKWFb88faqSnP8w_aMOhNrnxfVAltP3t_gswj_MWuFC2JSdGoqPnNkSwdl90DRyORCaG5lkwIoMp7vohIhJkmtAsW8GRc9ODGNCq5Dzvdnx_3uBhpzCINHLGgEuHQopThtspjG5NRDyBOHFxOhq4HEhup4yznmabxr3KW8QAPtWrvPM-xVK5S9hUHko6t7XVx42Ii1c6PFdfes_1kc2tVXCKUGkrZri-LwDNapx8XdT7CG9x_vcuxaaJtpvuj2izKWMWtr5eIBeEQHpecFzhYXQR819-K2NId_1I8HrG5S2-FfcJbIXap8JvPoCWA12MDY_AuFD1dpFWX7A5TLcIioSBBjcLU&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_MRM_OSPCC&keyword=NL_LP1&campaignID=PLYS&mrmid=&mtmid=&clickid=MKQqv3x_x7NsbCK08yCzoPiKpZ_LRjpTiAbpO2eVT99jaCStcvTWl39JZ823s3ln00vGagPudQvdp3iA8vb5T5PiWQRTFkrBNFfApZ9aYLPcVl4RDZ28hchxF6ctWnsWfHTLTeA-qaLOy-37xVd5rgDs6vvR0Kc8Bq6j7CiPgN9Y0vaqfOmkOmTpeEb9G8vKoizZc_tdvDsYVdOsLl3Rola5P3VdGlTEif8TFiYs9f-jlEMhJA0JiEEH2NFBMpuPo_qwZvxhc7aJmcQmg9l4M3bQ2OCAa5wNlJyJ8YkEnE-28qwVocrHP8bD6BSOfCeApX70BAJGZ8yddsMCiQh9A7Vg2VzshAOW1EYv1IAdL-rQCiyhv62-oGnzssT00sW3sfqfrrjqa4UdJ3wXnsU6nx42ssIK415xFGHNv3NLWPORys6cS8NzQK8&filter=40921455&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ABLNtJdx0ggADTox-3OrkEs0hwg0TYKdfmyVXcgVISiGBAAAAAA&filter=26911&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_MRM_OSPCC&keyword=SE_LP1&campaignID=PLYS&mrmid=&mtmid=&clickid=R-rHtx9tbNYoquoXBGarYPzdy12rwQZErgXGCvr6Puz0TrOOZUGkVOP4dTpR7SqDF3bdqy_nvM3cd2WOBIZ_AYsZrQ2QnK7xUrVdRP0HKezDsV_mcWDzjGslOYGXZltjZIVugrFuCqGfyQ5Iqn5U5Vlb4K_bnusZh8pVDDkvGsBJxTKma7TJqV3h8sbiGsl_V0gS2JIBJCVn_ZYEzcPBNXZmrKOi-b9tr0_b-gwvUXHq7Xkz0EnNh4gjgs2UJoZfANJWUmlyHLAJzX1OXDYGhSGwyFlWgIyjUSzr2_rY53mjQ8kPp4pAuAMdXFNvn_pmDaIGGEEHeHjnSOE_H6Lpe7CBtndJDBNnUDsRJ6__uhL8ZAiZEN80UTLOboSqw_AVA67N-9vqgXRM_4u7wBzNuQFUsBzpPJNO4Ovbd_Sz1Q&filter=64061621&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_SNW_OSPCC&keyword=MjU5fDQzNjB8U0V8M3wxfGRyaXZydXRpbmVyfGN6SnoqTURjNU56ZzVOamd5Wm1FeE5ESmtabUZsWkdObFlUVXdZVEJoWW1JMk1Uaw|ac79fe389d260e5cf45483ca1b974aae-47-481&campaignID=SNW&mrmid=&mtmid=&clickid=MjU5fDQzNjB8U0V8M3wxfGRyaXZydXRpbmVyfGN6SnoqTURjNU56ZzVOamd5Wm1FeE5ESmtabUZsWkdObFlUVXdZVEJoWW1JMk1Uaw|7cad93b3b1915f659eb954a513c84f70-30-481&filter=47&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26911&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=ACx3KaJ50ggADTox9DRVf9poAWDaT7MkgwVdRMlotiW0AwAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_MRM_OSPCC&keyword=SE_LP1&campaignID=PLYS&mrmid=&mtmid=&clickid=0Q204HyooOCLV3NVsgyxsd-Z8Hmd6ogU173a7VGttS1QX-ZB0lRTr8Tks0-d1CHSElMbovadDBHuO13X6vHb7Yt4-F2VdjvZHSeIpunvmnsUPtZanZtxxBavffpYWLWl3a89W2hCA-07bCGsFhmNUu4oFxVOVOzBtVjc8wJxwUOTvjqp8OrFN3ATHi_NUdmclHdtzytnUp7y8HzV2lfTil1Bt9LMezY5VoI59_jdUP0Q8RYOMC0Ahj3MRSi1KoZWPwsTMOxBW-VqWnQWCTP1e4A15_K1fH-BvDNvC51KP0nvmIfbUixAG7JD3jnmQJaYbrVff4kxV_7dfwwZbpphXeCoFocl1XGpG6XRXGk-dBNJNidSulAoMVvwaaWKZQ7kfPJd_X0knDWEUlOMryR32u-IMDZPPkLMUE7KSKFT4zMKTg&filter=64061621&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_MTM_OSPCC&keyword=NO_LP1&campaignID=MTM&mrmid=&mtmid=&clickid=20IE5Z3vQjupht9D1DIXvN1z3q85000.&filter=&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://gsf-cf.softonic.com/3e6/1a5/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_SNW_OSPCC&keyword=MjU5fDQxNjh8Tkx8M3wxfGRvd25sb2FkZW58Y3pKeipNVEl6TnpKak1HSXlPR1ZpTkdSak1qZ3lPREUwTUdJNVpHRTJNalZqWmpF|ac79fe389d260e5cf45483ca1b974aae-47-481&campaignID=SNW&mrmid=&mtmid=&clickid=MjU5fDQxNjh8Tkx8M3wxfGRvd25sb2FkZW58Y3pKeipNVEl6TnpKak1HSXlPR1ZpTkdSak1qZ3lPREUwTUdJNVpHRTJNalZqWmpF|7cad93b3b1915f659eb954a513c84f70-30-481&filter=47&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26911&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AFRpQx1w0ggADTox9qOwnDr_BJ1HRbZ3E3_JKuhlEAT1AgAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_BE_PP_MTM_OSPCC&keyword=NL_LP1&campaignID=MTM-3&mrmid=&mtmid=&clickid=20XzMz1.NeXU5IHy2.lpdY1z5AWh000.&filter=30679&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.