home

freeapps - aut. programfrissitő.exe

FreeApps

Cheng Du VTools Information Technology

The application freeapps - aut. programfrissitő.exe by Cheng Du VTools Information Technology has been detected as a potentially unwanted program by 7 anti-malware scanners.
Publisher:
VTools  (signed by Cheng Du VTools Information Technology)

Product:
FreeApps

Version:
1.3.1.0

MD5:
a55e0bd95488137867e525842b9a6c1a

SHA-1:
b7615b510902b9212eaa5c3b955c2cb0cb3cea05

SHA-256:
c4d97ee182243f7133d9e3fdb78ad220da3d4ff8181f378271ae0fa35a1ea054

Scanner detections:
7 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 3:35:53 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
probably Win32/FreeNew potentially unwanted application
9.7.0.302.0

herdProtect (fuzzy)
variant of freeapps.exe (PUP)
2015.8.2.23

IKARUS anti.virus
PUA.FreeNew
t3scan.1.8.9.0

Norman
FakeAntiSpy.B
11.20150504

Reason Heuristics
PUP.ChengDuVToolsInformationTechnology
15.5.4.14

Rising Antivirus
Suspicious
23.00.65.15731

Trend Micro House Call
TROJ_GEN.F47V0101
7.2.214

File size:
795.4 KB (814,496 bytes)

Product version:
1.0.0.0

Copyright:
Copyright(C) 2009-2010

Trademarks:
VTools

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Cheng Du VTools Information Technology

Authority:
VeriSign, Inc.

Valid from:
1/26/2010 1:00:00 AM

Valid to:
1/27/2012 12:59:59 AM

Subject:
CN=Cheng Du VTools Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cheng Du VTools Information Technology, L=ChengDu, S=SiChuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
74ABEBE80CBD793FD40D60CBD6D03A38

File PE Metadata
Compilation timestamp:
8/5/2010 11:33:20 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:lMqudO7eaQ5xNhrM9rxGyY5dKRCB7fujFqxGxcwNPgCgfMfVKHgcLWSFTkV8BInx:MOJQ57loh6GxNRbCMfkA0tTkVtT/LrF

Entry address:
0x22FB80

Entry point:
60, BE, 00, 50, 58, 00, 8D, BE, 00, C0, E7, FF, C7, 87, C4, 97, 1A, 00, 2A, 1F, A7, 0A, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
684 KB (700,416 bytes)

Remove freeapps - aut. programfrissitő.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.