» setup_systemcare2.0.0.3400.exe
Overview
Analysis
File Details
Downloads (1)

setup_systemcare2.0.0.3400.exe

ToolWiz Care

XII CNC Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from download.toolwiz.com.

File name:

Publisher:

ToolWiz (signed by XII CNC Inc.)

Product:

ToolWiz Care

Version:

2.0.0.3400

MD5:

85c5596022aba08d8ed87ce101adf7f8

SHA-1:

9f6244b03c3417c1f7d7a2ee460bb628da99dea6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 7:20:38 PM UTC (today)

File size:

7.2 MB (7,542,592 bytes)

Product version:

2.0

Trademarks:

ToolWiz

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\documents and settings\administrator\moje dokumenty\downloads\setup_systemcare2.0.0.3400.exe

Digital Signature

Signed by:

XII CNC Inc.

Authority:

VeriSign, Inc.

Valid from:

8/29/2012 2:00:00 AM

Valid to:

9/29/2013 1:59:59 AM

Subject:

CN=XII CNC Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XII CNC Inc., L=Anyang-si, S=Gyunggi-do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5AE657C73341F9A5D7BDDD336C543E67

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:F7SA+S+98xraevgJd0V2SUSc+4UMf6qcDzAPP4A8m:FLL+989a0gi9UKvBLE

Entry address:

0xF6F001

Entry point:

60, E9, 3D, 04, 00, 00, FB, 54, B6, 21, 13, 9B, B2, 9A, 23, 49, F6, 21, 10, AD, 99, BC, C3, 4F, F6, 21, 90, CD, 4E, 68, 57, 70, B2, A8, 8E, 8C, FB, 65, 13, 7F, 37, 47, 10, 70, B2, E6, 96, 43, 8B, 65, 13, 70, B2, 21, 13, FD, 37, 25, 59, 34, B2, 71, EC, E5, B2, 6A, 57, 70, 3B, A4, 13, 3A, F6, 21, 98, 88, 3F, BC, 02, 3A, F6, 21, 40, 20, 4D, B4, EF, 3A, F6, 21, 9A, F5, 4E, 1E, 57, 70, 3F, BC, 0D, 3A, F6, 21, 40, 27, 4D, B4, EF, 3A, F6, 21, 9A, F5, B2, 61, 57, 70, 3F, A4, A6, 49, F6, 21, EC, 90, AE, 46, 06, 70... 
[+]

Packer / compiler:

ASPack v2.11

Code size:

1.3 MB (1,399,808 bytes)

The file setup_systemcare2.0.0.3400.exe has been seen being distributed by the following URL.

http://download.toolwiz.com/Setup_SystemCare2.0.0.3400.exe

Scan setup_systemcare2.0.0.3400.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.