advanced-systemcare-setup.exe

Advanced SystemCare

IObit Information Technology

This is a self-extracting archive and installer. The file has been seen being downloaded from download-1.com and multiple other hosts.
Publisher:
IObit  (signed by IObit Information Technology)

Product:
Advanced SystemCare

Description:
Advanced SystemCare Installer

Version:
8.3.0.807

MD5:
efb3f3cde0f63f8cea843e7f62539db7

SHA-1:
aa1b65c61850fbde3bf1d5c2d67ad4fbfc7267fc

SHA-256:
f63f1a334b23f142c8cf2f5a05ab25c0c11abf654b37751916303ab91c0a66db

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 6:05:07 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Program.Unwanted.276
9.0.1.0168

G Data
Win32.Adware.iObit
15.6.25

File size:
45.5 MB (47,736,096 bytes)

Product version:
8.3.0.0

Copyright:
Copyright© 2005-2015

Trademarks:
IObit

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\advanced-systemcare-setup.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/15/2013 12:00:00 AM

Valid to:
2/14/2016 11:59:59 PM

Subject:
CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
11CADAF29DA4C3CB113BF1877B120103

File PE Metadata
Compilation timestamp:
6/16/2015 8:35:37 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:etxECdP468Ngu9GkbBp5i+8S0qZNt5Ggd+8/7Z0m91V8zhi5MFAJsXxrxnbI:4xBP4Tgu9e+rJh/N0m7Wz8GO

Entry address:
0x1CEA8C

Entry point:
55, 8B, EC, 83, C4, F0, B8, 24, BE, 5C, 00, E8, 64, AA, E3, FF, 68, FC, EA, 5C, 00, 6A, FF, 6A, 00, E8, 2A, B3, E3, FF, E8, 45, B5, E3, FF, 3D, B7, 00, 00, 00, 74, 41, A1, 34, A8, 5D, 00, 8B, 00, E8, 2E, D8, F2, FF, A1, 34, A8, 5D, 00, 8B, 00, BA, 30, EB, 5C, 00, E8, 81, D2, F2, FF, 8B, 0D, B4, A6, 5D, 00, A1, 34, A8, 5D, 00, 8B, 00, 8B, 15, F0, AA, 5B, 00, E8, 1D, D8, F2, FF, A1, 34, A8, 5D, 00, 8B, 00, E8, 61, D9, F2, FF, E8, C8, 6F, E3, FF, 41, 00, 53, 00, 43, 00, 5F, 00, 54, 00, 72, 00, 69, 00, 61, 00...
 
[+]

Entropy:
7.9711

Developed / compiled with:
Microsoft Visual C++

Code size:
1.8 MB (1,888,768 bytes)

The file advanced-systemcare-setup.exe has been seen being distributed by the following 21 URLs.

http://download-1.com/softwares/.../asc-v6.3.0-setup.exe

http://dw.uptodown.com/dl/1439758901/.../advanced-systemcare-free-8-3-0-807-multi-win.exe

https://tmpfile11094.s3.amazonaws.com/download77/ic_trackings/11489/.../advanced-systemcare-free.exe

Scan advanced-systemcare-setup.exe - Powered by Reason Core Security