home

onesafe_pc_cleaner.exe

OneSafe PC Cleaner

AVANQUEST SOFTWARE

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from webtools.avanquest.com and multiple other hosts.
Publisher:
AVANQUEST SOFTWARE  (signed and verified)

Product:
OneSafe PC Cleaner

Version:
4.0

MD5:
c9ec7fb5cb833fdd6e2b5c713613dfc2

SHA-1:
cb592840fe2609cdb339e228d54a095d36e29a53

SHA-256:
44d6e80088968d9ffca4a0769f4e9be9f163573a45c8f6a8c77d987e84da33b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:19:02 PM UTC  (today)

File size:
2.2 MB (2,329,648 bytes)

Product version:
4.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
AVANQUEST SOFTWARE

Authority:
Symantec Corporation

Valid from:
2/13/2015 1:00:00 AM

Valid to:
3/7/2017 12:59:59 AM

Subject:
CN=AVANQUEST SOFTWARE, O=AVANQUEST SOFTWARE, L=Paris, S=Ile de France, C=FR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6720EB953FB3B3DD5351FF987A4D7CD7

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:D2oI/lNEjgY9OlTlB+MJFWKAdHOwUIaMhW5UvdpSYn+Stz:qoIdgjOlTl0DdFUIaMhsUdpD

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9953

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file onesafe_pc_cleaner.exe has been seen being distributed by the following 20 URLs.

http://webtools.avanquest.com/download.cfm?filter=32944&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=AEZ77A-j0ggADTqw6pbZeUjFSX5NR7gNquNE_7N1bSwRAQAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_EN_PP_VEL_OSPCC&keyword=EN_LP1&campaignID=VEL&mrmid=&mtmid=&clickid=nym1CPap45qRsJCHXxACGI2g3rO_m_u-EyIOOTAuMjA2LjEyNy4yNDAoATDz8qGuBQ..&filter=4442034&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_DK_PP_VEL_OSPCC&keyword=DK_LP1&campaignID=VEL&mrmid=&mtmid=&clickid=ams1CPvG08XczpjLVRACGKmorqr2z7DlCyIMODUuODIuMTU2LjIxKAEwk8uNrgU.&filter=4442031&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_NO_PP_VEL_OSPCC&keyword=NO_LP1&campaignID=VEL&mrmid=&mtmid=&clickid=fra1CNevruXj3Ny2VhACGL64yfTUtLv_eiILODQuMjEwLjcuODQoATCmoYyuBQ..&filter=4420434&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_DK_PP_REDPOP_OSPCC&keyword=DK_LP1&campaignID=REDPOP&mrmid=&mtmid=&clickid=for_bcbe8d8571de49cb839d79467ef37a1d&filter=830850&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70174491&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=QJeICBORqmLHDZAkweS6cIVq7SBr4D4gcVXPdeGzbXtYY6iSUqa2KeI3F7Ta8zkwZ3ZgE8oOt71oq4GWSWadW1RUWMdXKwCiieiT61uIkgnhwh4uL8dreDMJpnn4QtCh2rlvrjdGVM_-CDaO4tptGRTi_ilfT_AA4md0Y4lvDHpsfrZTluyKhfH-U1ZY4hMEp0Tu7tErF_8blpJZNNUIssI2tzwbXUaenvW2sYnQeQ9q56FET24vGwX0QvaEOx9W5fgPxMb3n9_AdECrS8NrDe8qSi0pzBkWN7zKtdU_npX7lOVuUhSonDVKbB-16gzR0QjGjsurfzeVNeFAHK6W4YsInhAraN909gC-NJ708aaiXdDZ6eyM9XBEIBwf_1Of4joxK_ECI91JYoRQ2-kiajSalajYSR169UOaK7vrMfQlI1N0oP2y-pBGx5gMb3hmJO0oChStZLMkpNlW0lIeog&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=$.google.com/chrome_$support.google.com&tracking=AQ_PT_PP_YEP_OSPCC&keyword=SE_LP1&campaignID=YEPR&mrmid=&mtmid=&clickid=$feb989fdc44348ca939b917112d54a70&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=$.google.com/chrome_$www.google.com&tracking=AQ_PT_PP_YEP_OSPCC&keyword=SE_LP1&campaignID=YEPR&mrmid=&mtmid=&clickid=$99353dda508d418b9c809041706b18a6&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_EN_PP_YEP_OSPCC&keyword=EN_LP1&campaignID=YEPA&mrmid=&mtmid=&clickid=ams1CNn4u9LUh9fpQRACGLughfSNwPv9fSIMOTIuNDAuMjQ4LjI4KAEw_-_crQU.&filter=4563592_http://x.rafomedia.com/tt?size=728*90&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=4792033_http://www.istartsurf.com&tracking=AQ_CH_PP_YEP_OSPCC&keyword=EN_LP1&campaignID=YEPA&mrmid=&clickid=fra1CKvkrOjtzbGQCBACGJPAuJi-_LnUHyIMNzcuNTYuNjYuMjA3KAEwiqzUrQU.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=70174491&tracking=AQ_EN_PP_MRM_OSPCC&keyword=EN_LP1&campaignID=PLYS&mrmid=&clickid=qgkjC8DPt8ZEW9x7DdO_zhifRn-h4VWBp6ioqfXPtoRkbx7QUEio4var_cBYHr2E96eEL1jHcbBYr3ihQtB08qG-Jia0kgsUAT-_HW1oHYdFr39_7B6Rws6_V9NiWdOLCYjjHliOwz2KuIgI4xyHHMcScYILLB98WBcyy6a8y4axaKcHr2NlZPtFNcnWR_XY8UyJ8J8MLD3ubOONbs8VYS4XhfsIAGIABZzQYMHB2N2MAohlLxMqElqiqm_d6o8OjcwCKixcz9EH1AeWhpt24Tp-qVJwSftb2MLkTdfQL_FG4Fut_Gh8tPxbqobFxMWSy1E5KtMFQvFfdIVM0TtXNtcBxKROj54N1phfn9yZkTHYhRCuZiFDTdkFjDIxoRze3RkxrETvQzNQcPsD9n_EFrym5y5nYOD3j754wLPFhlfk8ZpNX6w0aOm0uG38nUqt&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_SE_PP_SNW_OSPCC&keyword=MjU5fDQzNjB8U0V8M3wxfHxZMmwwZVEqZTNOMFlYUmxmUX5jekp6KlpEVXpaREpoTXpFd05qVXlOR1E1T1dFek9ERTBaVFV4Tmprd05EVTJOREV-Wkc5dFlXbHUqYVdSbGJuUnBkSGx6WVdabExtNXZjblJ2Ymk1amIyMH5ZbUZ1Ym1WeSpNamN5TURnMn5hMlY1ZDI5eVpBKmJtOXlkRzl1|ac79fe389d260e5cf45483ca1b974aae-47-481&campaignID=SNW&mrmid=&mtmid=&clickid=MjU5fDQzNjB8U0V8M3wxfHxZMmwwZVEqZTNOMFlYUmxmUX5jekp6KlpEVXpaREpoTXpFd05qVXlOR1E1T1dFek9ERTBaVFV4Tmprd05EVTJOREV-Wkc5dFlXbHUqYVdSbGJuUnBkSGx6WVdabExtNXZjblJ2Ymk1amIyMH5ZbUZ1Ym1WeSpNamN5TURnMn5hMlY1ZDI5eVpBKmJtOXlkRzl1|7cad93b3b1915f659eb954a513c84f70-30-481&filter=47&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NO_PP_AFD_OSPCC&keyword=NO_LP1&campaignID=AFD2&mrmid=&mtmid=&clickid=ANI0ZHym0ggADTqxscv-7Ajk2sGORKo6_AonIkfxInIsAAAAAAA&filter=30858&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=32944&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=ALRyyH2o0ggADTqxtoAhKkDnc3k2Rr7hvPxdDUdcWzyHAAAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_EN_PP_VEL_OSPCC&keyword=EN_LP1&campaignID=VEL&mrmid=&mtmid=&clickid=fra1CIyI3qCSkdz-fBACGLTH97Sxv9eUKyIOMTUxLjIyNi4xNTMuNDIoATCguYyuBQ..&filter=4442034&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=30679&tracking=AQ_EN_PP_MTM_OSPCC&keyword=EN_LP1&campaignID=MTM-3&mrmid=&clickid=20XzOZ1.pubybca43yUzIM1zk7hV000.&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=AQ_NL_PP_REDPOP_OSPCC&keyword=NL_LP1&campaignID=REDPOP&mrmid=&mtmid=&clickid=for_c3e1dc6ad66c4bdd80788a8c8d2fd324&filter=835031&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?filter=26911&tracking=AQ_EN_PP_AFD_OSPCC&keyword=EN_LP1&campaignID=AFD2&mrmid=&clickid=ANhqUU6c0ggADTqw3Mo8S2uckBgATLah09-37uhrG7_HAAAAAAA&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://webtools.avanquest.com/download.cfm?tracking=UTL_BE_PP_VEL_OSPCC&keyword=NL_LP1&campaignID=VEL&mrmid=&mtmid=&clickid=ams1CPHhvYvItqHdMBACGN-Y2bT69NbfLiILNzguMjEuMzIuNTUoATC3us-tBQ..&filter=4714901&go=http://cdn.Onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

http://cdn.onesafe-software.com/OneSafe_PC_Cleaner/.../OneSafe_PC_Cleaner.exe

Scan onesafe_pc_cleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.