home

freepcaudit.exe

MIS Utilities

This is a setup program which is used to install the application. This is installed with SuperCleanerZ. The file has been seen being downloaded from intranet and multiple other hosts.
Publisher:
MIS Utilities  (signed and verified)

Version:
3.0.0.0

MD5:
c3075743d80b06bc616689f03cb93fb4

SHA-1:
3a3fbf78cb729dc4f5b1c850713c428a51d74088

SHA-256:
1640a32bea0132193547b86d83d922fac92965a953a38073e96b373b00037677

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 9:32:32 AM UTC  (today)

File size:
1 MB (1,055,176 bytes)

Product version:
3.0

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\freepcaudit.exe

Digital Signature
Signed by:
MIS Utilities

Authority:
COMODO CA Limited

Valid from:
8/23/2011 4:00:00 AM

Valid to:
8/23/2012 3:59:59 AM

Subject:
CN=MIS Utilities, O=MIS Utilities, STREET=Kharkivske shose 51-104, L=Kyiv, S=Ukraine, PostalCode=02096, C=UA

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D5BA627EA76EDA8E214214EE87B915D7

File PE Metadata
Compilation timestamp:
6/6/2012 12:14:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ViZOyGxMA61FVwkNqQPF3B12VAQvCokEUQE+X97ot787O7/lXBZPGsJFbUP7FSKt:CEC7VwEqQd3B1/QqoPEntMMxZ7P1

Entry address:
0xCB8EC

Entry point:
55, 8B, EC, 83, C4, F0, B8, 50, A2, 4C, 00, E8, 9C, B5, F3, FF, A1, 28, E2, 4C, 00, 8B, 00, E8, A4, 3B, FA, FF, A1, 28, E2, 4C, 00, 8B, 00, BA, 58, B9, 4C, 00, E8, 4B, 36, FA, FF, A1, 28, E2, 4C, 00, 8B, 00, B2, 01, E8, 89, 5A, FA, FF, 8B, 0D, C8, E0, 4C, 00, A1, 28, E2, 4C, 00, 8B, 00, 8B, 15, 64, 6B, 4C, 00, E8, 85, 3B, FA, FF, A1, 28, E2, 4C, 00, 8B, 00, E8, CD, 3C, FA, FF, E8, D8, 90, F3, FF, FF, FF, FF, FF, 0D, 00, 00, 00, 46, 72, 65, 65, 20, 50, 43, 20, 41, 75, 64, 69, 74, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
808 KB (827,392 bytes)

The file freepcaudit.exe has been discovered within the following program.

SuperCleanerZ
www.ZyoTechnoogy.com
52% remove it
 
Powered by Should I Remove It?

The file freepcaudit.exe has been seen being distributed by the following 8 URLs.

http://intranet/Soporte/.../Inventario.exe

http://software-files-a.cnet.com/s/software/12/59/52/.../freepcaudit.exe

http://glenmichaelson.livedrive.com/.../DownloadSharedFile?NodeID=a4ce477cd8bc4ab393c283989f090b18&AID=472769

http://www.misutilities.com/freepcaudit.exe

https://doc-0c-2s-docs.googleusercontent.com/docs/securesc/qbjb78ld4ud3638jo91ilgjhstc125q5/486svg2uvdofns5hifm0e7e83ba4ljam/1392012000000/.../11893274153147378923/0BwtxJOG_zKo-bXNCNVAyRkZxelk?e=download&h=16653014193614665626&nonce=dmuflegva4v7c&user=11893274153147378923&hash=mbgi4h0uhdsjphtruq834rrg7qa0hum2

https://docs.google.com/nonceSigner?nonce=dmuflegva4v7c&continue=https://doc-0c-2s-docs.googleusercontent.com/docs/securesc/qbjb78ld4ud3638jo91ilgjhstc125q5/486svg2uvdofns5hifm0e7e83ba4ljam/1392012000000/.../11893274153147378923/0BwtxJOG_zKo-bXNCNVAyRkZxelk?e=download&h=16653014193614665626&hash=asds62upbp10b36fup05me3q37tg8tvl

https://doc-0c-2s-docs.googleusercontent.com/docs/securesc/qbjb78ld4ud3638jo91ilgjhstc125q5/486svg2uvdofns5hifm0e7e83ba4ljam/1392012000000/.../11893274153147378923/0BwtxJOG_zKo-bXNCNVAyRkZxelk?h=16653014193614665626&e=download

https://drive.google.com/uc?id=0BwtxJOG_zKo-bXNCNVAyRkZxelk&export=download

Scan freepcaudit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.