home

autodetectutility.exe

MD5:
5289a7ec2b8f72ea87c23997fead0e5f

SHA-1:
9d3416fe663bbdf5acb438fbb63126b81271a7e6

SHA-256:
3d7e3d8bf23c0635101ade065c31b477b036f3d694779a3b3d754280675dec37

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:33:05 PM UTC  (today)

File size:
3.5 MB (3,651,744 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\autodetectutility.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:GGlpro+Qh2b317oy4BGZ3MFLOAkGkzdnEVomFHKnP73:zHQh2b317oc3MFLOyomFHKnP73

Entry point:
50, 30, A1, 08, 4B, 63, 00, 8B, 8E, B4, 00, 00, 00, F7, D8, 1B, C0, 83, E0, FC, 83, C0, 04, 50, EB, 01, 53, E8, 7D, D8, F1, FF, 8B, 8E, B0, 00, 00, 00, 85, C9, 74, 19, 39, 59, 20, 74, 14, 39, 5D, 08, 74, 09, 39, 5E, 7C, 74, 04, 6A, 04, EB, 01, 53, E8, 5A, D8, F1, FF, 5E, 5B, 5D, C2, 04, 00, 55, 8B, EC, 8B, 55, 08, 8B, 41, 54, 03, C2, 89, 41, 5C, 8B, 81, B4, 00, 00, 00, 89, 51, 70, 85, C0, 74, 0B, 83, 78, 20, 00, 74, 05, E8, 38, E5, FF, FF, 5D, C2, 04, 00, 6A, 04, B8, DF, F4, 5B, 00, E8, 15, E4, 03, 00, 8B...
 
[+]

Entropy:
6.4577

The file autodetectutility.exe has been seen being distributed by the following URL.

http://www2.ati.com/drivers/.../autodetectutility.exe

Scan autodetectutility.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.