home

amdcleanuputility.exe

MD5:
68f9914ee2945140a78313dd02b54dc7

SHA-1:
a6e6153938199ad8a6eadd24d95be005bed444da

SHA-256:
7a297f7c7a28283f70388937960f4a55d294674fcadca293e7ec7cb0293cfa76

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:00:41 AM UTC  (today)

File size:
4.4 MB (4,640,930 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\amdcleanuputility.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:5wYpeVuvJ8E8kjKlmjKbSjUoIZ0eHSQCx2/1dV/b0rnQhiPBk09I/GF6BiDWXBrU:2YpeVkJ8kjKlmjKbxDWRB8Ad8E

Entry point:
C0, 74, 2F, 48, 89, 84, 24, 48, 01, 00, 00, 41, 8B, CE, F0, 0F, C1, 48, 08, 41, 03, CE, 75, 15, 48, 8B, 8C, 24, 48, 01, 00, 00, 48, 85, C9, 74, 08, 48, 8B, 01, 41, 8B, D7, FF, 10, 48, 89, 5C, 24, 40, 48, 8B, 44, 24, 38, 48, 85, C0, 74, 2F, 48, 89, 84, 24, 58, 01, 00, 00, 41, 8B, CE, F0, 0F, C1, 48, 08, 41, 03, CE, 75, 15, 48, 8B, 8C, 24, 58, 01, 00, 00, 48, 85, C9, 74, 08, 48, 8B, 01, 41, 8B, D7, FF, 10, 48, 89, 5C, 24, 38, 48, 8B, 4C, 24, 60, 48, 83, C1, E8, 48, 89, 8C, 24, 68, 01, 00, 00, 41, 8B, C6, F0...
 
[+]

Entropy:
6.5841

The file amdcleanuputility.exe has been seen being distributed by the following URL.

http://www2.ati.com/.../amdcleanuputility.exe

Scan amdcleanuputility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.