» setup_systemcare2.0.0.4500.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (1)

setup_systemcare2.0.0.4500.exe

ToolWiz Care

XII CNC Inc.

This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program Toolwiz Care by ToolWiz Care. This is installed with Toolwiz Care. The file has been seen being downloaded from download.toolwiz.com.

File name:

Publisher:

ToolWiz (signed by XII CNC Inc.)

Product:

ToolWiz Care

Version:

2.0.0.4500

MD5:

f8ccafe7e4f09ce88e9517a96bb774ca

SHA-1:

428b1e2bc2b019e550af19d528b0e1ebac585a73

SHA-256:

08d7776c8b4e0d7322cefcc93b0e688f3950af756d760189a958261f74eb145b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 10:55:44 PM UTC (today)

File size:

7.3 MB (7,683,328 bytes)

Product version:

2.0

Trademarks:

ToolWiz

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\setup_systemcare2.0.0.4500.exe

Digital Signature

Signed by:

XII CNC Inc.

Authority:

VeriSign, Inc.

Valid from:

8/29/2012 4:00:00 AM

Valid to:

9/29/2013 3:59:59 AM

Subject:

CN=XII CNC Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XII CNC Inc., L=Anyang-si, S=Gyunggi-do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5AE657C73341F9A5D7BDDD336C543E67

File PE Metadata

Compilation timestamp:

6/20/1992 2:22:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:/S++1xrsScrNVyFYpeTM2yIX9huRNgYcA1QsZ4g40:/S51122FUeT7yIXGR2A1npt

Entry address:

0xFB0001

Entry point:

60, E9, 3D, 04, 00, 00, E9, 25, 05, 01, 01, EC, 01, BC, 31, 3A, 45, 01, 04, DE, 2C, 9E, D1, 40, 45, 01, 84, BE, FD, 4A, 45, 01, 01, 8A, 9E, FD, 4A, 45, 01, 10, 86, 67, 04, 01, 01, C8, 86, 34, 3A, 45, 01, 01, 01, 01, 01, 8E, 86, 05, 4B, 45, 01, 51, 00, 96, 01, 4C, 45, 01, 8A, 86, 01, 4B, 45, 01, 8C, F9, 8E, 9E, 12, 4B, 45, 01, 54, 51, 00, 96, FD, 4B, 45, 01, 8A, 86, FD, 40, 45, 01, 8E, 9E, 1F, 4B, 45, 01, 54, 58, 00, 96, FD, 4B, 45, 01, 8A, 86, 01, 41, 45, 01, 8E, 86, B6, 3A, 45, 01, 00, E1, B1, 6A, 16, 01... 
[+]

Code size:

1.3 MB (1,400,320 bytes)

Program Uninstaller

Program name:

Toolwiz Care

Display publisher:

ToolWiz Care

Display version:

2.0.0.4500

Uninstall string:

"C:\Program Files (x86)\ToolwizCareFree\UninstallToolwizCare.exe" /REMOVE

The file setup_systemcare2.0.0.4500.exe has been discovered within the following program.

Toolwiz Care by ToolWiz

Publisher's description - “ToolWiz Care is a set of free-of-charge tools designed to speed up your PC and give your system a full range of care.”

www.Toolwiz.com

4% remove it

The file setup_systemcare2.0.0.4500.exe has been seen being distributed by the following URL.

http://download.toolwiz.com/Setup_SystemCare2.0.0.4500.exe

Scan setup_systemcare2.0.0.4500.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.