home

useful file utilities.exe

The application useful file utilities.exe has been detected as a potentially unwanted program by 16 anti-malware scanners.
MD5:
f314b80fe917d8119b88a5c795629278

SHA-1:
2f2fb4793975fcfb90d9a34ee916b9af446b30cf

SHA-256:
1efe9af3ea2db223a9fe10bda3c07b6d73c874727ba00bbaeb1f8a7555e94d99

Scanner detections:
16 / 68

Status:
Potentially unwanted

Analysis date:
4/29/2024 1:10:26 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Malware/Win32.Suspicious
17.03.15

Avira AntiVirus
TR/Gendal.1338368.A
None

avast!
Win32:Adware-gen
2014.9-170315

AVG
Win32/Heur
2018.0.2439

Comodo Security
Packed.Win32.Packer.~GEN
8183

G Data
Win32:Adware-gen
17.3.None

IKARUS anti.virus
Trojan.Win32.Gendal
None

K7 AntiVirus
Trojan
13.None

McAfee
Artemis!F314B80FE917
5600.6095

Norman
W32/Packed_VCrypt.A
11.20170315

Panda Antivirus
Trj/CI.A
17.03.15.04

Prevx
High Risk Worm
3.0

Sophos
Mal/Packer
4.64

Trend Micro House Call
TROJ_GEN.R47C3GJ
7.2.74

Trend Micro
TROJ_GEN.R47C3GJ
10.465.15

VIPRE Antivirus
Trojan.Win32.Generic
None

File size:
1.3 MB (1,338,368 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/20/2009 9:15:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x105644

Entry point:
9C, 55, E8, EC, 00, 00, 00, 87, D5, 5D, 60, 87, D5, 80, BD, 15, 27, 40, 00, 01, 74, 39, C6, 85, 15, 27, 40, 00, 01, E9, E4, 00, 00, 00, E9, D6, 8C, C6, AF, 52, 56, 96, C5, B0, B2, 5F, 92, 1B, DF, 2B, 4A, DA, 71, F2, 7C, 7E, B9, 7B, 4D, 17, 43, AB, F4, 9F, 13, 59, 2C, F0, 57, F1, A8, AB, FC, 91, E0, 57, D9, FB, D9, 29, 9B, 01, E3, E7, 32, 5D, 80, A1, 11, 2C, 45, C8, A7, F7, 1F, A3, 19, CC, C6, 26, D8, D4, 2C, 80, 97, 0D, BC, 9C, 65, 3A, 55, 21, 19, 73, 40, 7A, AF, 8D, 4A, 82, 2F, F3, A8, 92, DF, 98, AF, 13...
 
[+]

Entropy:
7.3055

Packer / compiler:
Virogen Crypt v0.75

Code size:
1 MB (1,063,424 bytes)

Remove useful file utilities.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.