» setup_systemcare.exe
Overview
Analysis
File Details

setup_systemcare.exe

ToolWiz Care

XII CNC Inc.

File name:

Publisher:

ToolWiz (signed by XII CNC Inc.)

Product:

ToolWiz Care

Version:

1.0.0.184

MD5:

45b4fbdb9f542861186671871006fbc1

SHA-1:

e9048bfab1c2c78a90e5a6751bf8bf4bc210e464

SHA-256:

17330ff539362ef010182ab27fabca4faf09dcb7a6cf2658706d948dd435cccc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:28:38 PM UTC (today)

File size:

3.7 MB (3,927,320 bytes)

Product version:

1.0.0

Trademarks:

ToolWiz

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\downloads\setup_systemcare.exe

Digital Signature

Signed by:

XII CNC Inc.

Authority:

VeriSign, Inc.

Valid from:

7/31/2011 8:00:00 PM

Valid to:

8/30/2012 7:59:59 PM

Subject:

CN=XII CNC Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XII CNC Inc., L=Anyang, S=Kyunggi, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6B01A485CA0C94226AA153DE1A468248

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:9C5CyqZss+93pQ/hdH+OPbvfQqTWbaklGNaddRmbxL3:Xg9cbwqybakkMdMF

Entry address:

0xA7C001

Entry point:

60, E9, 3D, 04, 00, 00, FB, 41, AA, 59, 13, 8E, AE, E2, 23, 5C, EA, 59, 10, B8, 85, C4, C3, 5A, EA, 59, 90, D8, 52, 10, 57, 65, AE, D0, 8E, 99, E7, 1D, 13, 6A, 2B, 3F, 10, 65, AE, 9E, 96, 56, 97, 1D, 13, 65, AE, 59, 13, E8, 2B, 5D, 59, 21, AE, 09, EC, F0, AE, 12, 57, 65, 27, DC, 13, 2F, EA, 59, 98, 9D, 23, C4, 02, 2F, EA, 59, 40, 35, 51, CC, EF, 2F, EA, 59, 9A, E0, 52, 66, 57, 65, 23, C4, 0D, 2F, EA, 59, 40, 32, 51, CC, EF, 2F, EA, 59, 9A, E0, AE, 19, 57, 65, 23, DC, A6, 5C, EA, 59, EC, 85, EE, BA, 00, 65... 
[+]

Entropy:

7.9788

Packer / compiler:

ASPack v2.11

Code size:

1.2 MB (1,300,480 bytes)

Scan setup_systemcare.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.