» Anti Malware.EXE
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Anti Malware.EXE

Anti Malware Application

Pc Utility Inc.

The application Anti Malware.EXE by Pc Utility has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Anti Malware’. This file is typically installed with the program Anti Malware by PC Utility, Inc..

File name:

Anti Malware.EXE

Publisher:

PC Utility Inc. (signed by Pc Utility Inc. )

Product:

Anti Malware Application

Description:

Anti Malware

Version:

2.8.3976.910

MD5:

9e219d1615e2502551293c60b3d540aa

SHA-1:

55d86f459a6a66ff4ef47f025ebaa4c2953a994d

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 8:22:08 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.1.1.1

File size:

35.9 MB (37,651,784 bytes)

Product version:

2.8.0.0

Original file name:

Anti Malware.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\anti malware\anti malware.exe

Digital Signature

Signed by:

Pc Utility Inc.

Authority:

VeriSign, Inc.

Valid from:

9/21/2010 6:00:00 PM

Valid to:

11/13/2011 4:59:59 PM

Subject:

CN="Pc Utility Inc. ", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Pc Utility Inc. ", L=Ocean Springs, S=Mississippi, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3AD20CDDB887F15DA2951F79198F8DF7

File PE Metadata

Compilation timestamp:

11/11/2010 2:11:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:RFi2XN/t++7sSZR9hA6zVEtEM0MzD9aQ8CG8k4d4iuyzN31obd98UaLy:PXNr5ZR9TG/9aQ8t8t4iuoE/a2

Entry address:

0x1DDE7D

Entry point:

E8, AE, B2, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, 64, 83, 64, 00, 8B, 45, F8, 8B, 4D, FC, 6A, 00, 05, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 81, D1, 21, 4E, 62, FE, 51, 50, E8, 1B, B3, 00, 00, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, 55, 8B, EC, 83, EC, 20, 56, 33, F6, 39, 75, 0C, 75, 1D, E8, B9, 48, 00, 00, 56, 56, 56, 56, 56, C7, 00, 16, 00, 00, 00, E8, 9A, 0B, 00, 00, 83, C4, 14, 83, C8, FF, EB, 27, FF, 75, 14, 8D, 45, E0, FF, 75, 10, C7, 45, E4, FF, FF, FF... 
[+]

Entropy:

3.0423

Code size:

2.3 MB (2,387,968 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Anti Malware

Command:

C:\Program Files\anti malware\anti malware.exe -boot

The file Anti Malware.EXE has been discovered within the following program.

Anti Malware by PC Utility, Inc.

49% remove it

Remove Anti Malware.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.