advanced-systemcare-setup.exe

Advanced SystemCare

IObit Information Technology

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
IObit  (signed by IObit Information Technology)

Product:
Advanced SystemCare

Description:
Advanced SystemCare Installer

Version:
8.4.0.811

MD5:
efa143f43e14856e91cfe0058d9e49d1

SHA-1:
e2e85d2223f1562a8083bce054d92aa85beb9b88

SHA-256:
9bbc0c18d8a32c6160d127c2c8a88e31740e79039a74b4a21137f555d85ad765

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/2/2024 9:36:57 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Program.Unwanted.276
9.0.1.0243

G Data
Win32.Adware.iObit
15.8.25

File size:
46.6 MB (48,904,992 bytes)

Product version:
8.4.0.0

Copyright:
Copyright© 2005-2015

Trademarks:
IObit

Original file name:
Installer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\advanced-systemcare-setup.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
1/15/2013 1:00:00 AM

Valid to:
2/15/2016 12:59:59 AM

Subject:
CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
11CADAF29DA4C3CB113BF1877B120103

File PE Metadata
Compilation timestamp:
8/31/2015 11:44:17 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:PtfpaSd2+lkzrRUaMaQ3Ak67318eWE956mwxEGsDftYEaW5ixiZrP:lfs42+GzrRnxuANzrroEGsDVYZyixiZj

Entry address:
0x1CEA8C

Entry point:
55, 8B, EC, 83, C4, F0, B8, BC, C5, 5C, 00, E8, 64, AA, E3, FF, 68, FC, EA, 5C, 00, 6A, FF, 6A, 00, E8, 2A, B3, E3, FF, E8, 45, B5, E3, FF, 3D, B7, 00, 00, 00, 74, 41, A1, 34, A8, 5D, 00, 8B, 00, E8, 2E, D8, F2, FF, A1, 34, A8, 5D, 00, 8B, 00, BA, 30, EB, 5C, 00, E8, 81, D2, F2, FF, 8B, 0D, B4, A6, 5D, 00, A1, 34, A8, 5D, 00, 8B, 00, 8B, 15, EC, B0, 5B, 00, E8, 1D, D8, F2, FF, A1, 34, A8, 5D, 00, 8B, 00, E8, 61, D9, F2, FF, E8, C8, 6F, E3, FF, 41, 00, 53, 00, 43, 00, 5F, 00, 54, 00, 72, 00, 69, 00, 61, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.8 MB (1,890,816 bytes)

The file advanced-systemcare-setup.exe has been seen being distributed by the following 20 URLs.

http://lb.cdn.m6web.fr/d/c/a/a37acceb522292bfb9c2c2f3c990dd9c/5603f1c9/soft/.../advanced-systemcare_8-4-0-811_fr_403234.exe

http://advanced-systemcare.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvxO9Ap7G Xrp1sbmp 8tpGVGSulDy0A41mcRqedbgVhwYjVAjWHp1wLY3eR75A6BmMca/XjKCslVhKkzXHsieCjMUG/.../ gc0uMw6xdQK2Ce3XgfW3a0sH05ZmjC4=

http://www.majorgeeks.com/index.php?ct=files&action=download&

&onid=2086&oid=3001-2086_4-10407614&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/diagnostic&topicbrcrm=&pid=14452619&mfgid=6271865&merid=6271865&ctype=dm&cval=NONE&devicetype=desktop&pguid=f1398474f9c7b7d58fc8ce96&viewguid=YZI6yUoFCB0m2Gw9lQc0kTBGtZL5E5rOcPmA&destUrl=http://software-files-a.cnet.com/s/software/14/45/26/.../advanced-systemcare-setup.exe

Scan advanced-systemcare-setup.exe - Powered by Reason Core Security