» utool.exe
Overview
Analysis
File Details
Programs (1)

utool.exe

Software Removal Program

support@crystalidea.com

This file is installed with the program Uninstall Tool.

File name:

utool.exe

Publisher:

CrystalIDEA Software (signed by support@crystalidea.com)

Product:

Software Removal Program

Version:

2.9.6.5106

MD5:

21056667bc24a93b0ae12905824fa888

SHA-1:

208706be8f767813525da0c6d5203cc4b17d6e78

SHA-256:

bad4ffc97cbc5a3d1bcc37dd128c90e04bb550cbd382695e9f8465c3a0f52e7c

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 8:45:50 AM UTC (today)

Scan engine

Detection

Engine version

Bkav FE

W32.HfsAutoB

1.3.0.4613

F-Secure

Suspicious:W32/Malware!Gemini

11.2016-15-02_2

File size:

3.1 MB (3,237,288 bytes)

Product version:

2.9.6.5106

Original file name:

utool.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\uninstall tool\utool.exe

Digital Signature

Signed by:

support@crystalidea.com

Authority:

Unizeto Technologies S.A.

Valid from:

1/27/2010 3:41:09 PM

Valid to:

1/28/2011 3:41:09 PM

Subject:

E=support@crystalidea.com, CN=crystalidea.com, OU=Unizeto (r) Personal Certificates, O=support@crystalidea.com, C=BY

Issuer:

CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:

06E5AE

File PE Metadata

Compilation timestamp:

3/15/2010 11:37:25 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:6eE5neaJJepheHkG7WmEn1KgQ7S8sj9IL7alxTjUr1+oxY1WTO:6eExeaLEhHbmEn1KgQKqw95aQWTO

Entry address:

0x2D3644

Entry point:

E9, F6, 5E, 04, 00, D6, 27, 3E, 37, C0, FC, 9A, 78, 07, 16, B1, 63, C5, 11, 27, A3, F1, ED, 4C, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, AE, 71, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 77, EF, 75, 09, 8B, 1E, 83, EE, FC, E9, D7, 8C, FF, FF, E9, 72, C4, FF, FF, 8B, 45, F4, 8B, 00, 52, 68, 3F, DB, F7, 87, 5A, E9, 4D, 3A, 02, 00, 8B, E9, 59, E9, 8A, 01, 00, 00, E8, F8, 34, FF, FF, E9, C6, 91, 02, 00, 68, 2C, EA, 6A, 4C, E9, 09, 6F, 01, 00, E8... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

1.7 MB (1,828,864 bytes)

The file utool.exe has been discovered within the following program.

Uninstall Tool by CrystalIdea Software, Inc.

Publisher's description - “Uninstaller that works with lightning speed, performs complete removal of software and manages programs that run at system startup.”

www.crystalidea.com

22% remove it

Scan utool.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.