home

advanced systemcare.zip

The file advanced systemcare.zip has been detected as a potentially unwanted program by 3 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cdn.madanate.com.
MD5:
213dce9bd62392e9f6c44a7cad9bb815

SHA-1:
7038569cc869edb0b5d68448faa02da28c4f4048

SHA-256:
0c2f17f8a78d1bb68c80facddcd26c624b757b91a5b1f0bc94cbf9018dc9eef8

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
1/12/2025 5:25:37 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.InstallCore
7.1.1

Dr.Web
Threat.Undefined
9.0.1.05190

ESET NOD32
Win32/InstallCore.TP potentially unwanted application
7.0.302.0

File size:
756.7 KB (774,824 bytes)

Common path:
C:\users\{user}\downloads\advanced systemcare.zip

The file advanced systemcare.zip has been seen being distributed by the following URL.

http://cdn.madanate.com/c?x=IHYNK6dNfd7BLJErME6TH/GSO8MS6Q2jr bWDcPJMgc=&c=pX lsuiXzHtjBgt07T3vBFRo9GGyTHFGz6fB3VYV/K3cY6vJU73lYt1vYsGmdEwzSKsuUgNsDcm4UvHKppJJ1Wq8fbCo5lHX/IrNIT5n5jQjL0AbI4FbGVbVQjgoi9Y5GNniKZ33mf3mOM1NGCELZw==&fallback_url=http://update.iobit.com/.../advanced-systemcare-setup.exe&downloadAs=Advanced SystemCare

Remove advanced systemcare.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.