home

installutil.exe

Version:
0.0.0.0

MD5:
379f42b9a6f1c1b5d714508bad0e2bc1

SHA-1:
10fa327e151dc6cc3d6f23ee0db11672caec2118

SHA-256:
8280b3c2fcc127b80463c848d965d6afd60595cd8d0e6976eedb3386788206f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:37:19 AM UTC  (today)

File size:
7.5 KB (7,680 bytes)

Original file name:
installutil.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\unity\editor\data\monobleedingedge\lib\mono\4.5\installutil.exe

File PE Metadata
Compilation timestamp:
6/13/2012 3:28:02 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
96:4gajqt33JbSpng/aGcAn7stIdt38ae9zv0kMx4+UMdwDkJwi9kM25ipI0e:4gR13JbyGcCkIj8ae9zv4em2n

Entry address:
0x342E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.1218

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
5.5 KB (5,632 bytes)

The file installutil.exe has been seen being distributed by the following 3 URLs.

http://es.originaldll.com/.../31502.exe

http://es.dll-ocx.com/files/download-file/.../26401

http://originaldll.com/.../31502.exe

Scan installutil.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.