The IntuneWinAppUtil exe (IntuneWinAppUtil) Microsoft Corporation File Malware Analysis
Gridinsoft Logo

The IntuneWinAppUtil.exe (IntuneWinAppUtil) File Analysis

Technical Analysis

File Name IntuneWinAppUtil.exe
File Type
PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows
Scanner Version 1.0.219.174
Database Version 2025-06-24 17:00:14 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
55,240
File Size (bytes)
2025-06-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
049ba8d9794016c82efa212a8cab578b
SHA1
8530c79e751f70abea73430c8e27519ccaab905f
SHA256
25ccfcfbaf959a6a44f6ad3f3549ca3b3899f588a3cdd4dfeca5bb03d95edb3d
SHA512
b09e49b6424d3c23478690aac757fb5c988ec9086f448a610088725fab17ba1e2c6c330fd02ee8df7bd7ba66684b28e5fccf10c89e8c9fe7cb833f477af32fa3

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x140000000
Compilation Time 2060-05-09 21:14:17
Checksum 0x0000dacd (Actual: 0x0000dacd)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows
PDB Path D:\dbs\sh\emsa\0227_172926\src\Tools\IntuneWinAppUtil\obj\amd64\IntuneWinAppUtil.pdb
Digital Signature OK
Imports 0
Exports 0 functions
Resources 2 Resources
Sections 2 Sections

Version Information

Translation 0x0000 0x04b0
Comments Microsoft® Intune™
CompanyName Microsoft Corporation
FileDescription IntuneWinAppUtil
FileVersion 6.2404.13.0
InternalName IntuneWinAppUtil.exe
LegalCopyright © 2024 Microsoft Corporation. All rights reserved.
OriginalFilename IntuneWinAppUtil.exe
ProductName Microsoft® Intune™
ProductVersion 6.2404.13.0.017da829e4dc02b1df800b3e1a42d15fe862c7ef .develop (CO1PNPF00002E15.240227-1733)
Assembly Version 5.0.0.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 42,261 bytes 42,496 bytes 5.66 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B9DA031A907B9DAEC481442A73893A03
.rsrc 0x0000e000 1,796 bytes 2,048 bytes 3.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DF6E3BAE5384C87245CB68020819417D

Resource Analysis

Total Resources: 2 (1,630 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 1,140 bytes
69.9%
RT_MANIFEST 1 490 bytes
30.1%

Certificate Chain Analysis

Certificate Information
Product Microsoft® Intune™
Description IntuneWinAppUtil
File Version 6.2404.13.0
Original Name IntuneWinAppUtil.exe
Signing Date 01:34 AM 02/28/2024 (655 days ago)
Verification Status Signed
Signers Microsoft Corporation; Microsoft Code Signing PCA 2011; Microsoft Root Certificate Authority 2011
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name IntuneWinAppUtil.exe
Copyright © 2024 Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Corporation #1 Primary
Validity Period: 2023-11-16 19:09:00 → 2024-11-14 19:09:00
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 03 AF 30 40 0E 4C A3 4D 05 41 00 00 00 00 03 AF
Microsoft Code Signing PCA 2011 #2 Chain
Validity Period: 2011-07-08 20:59:09 → 2026-07-08 21:09:09
Signature Algorithm: sha256RSA
Serial Number: 61 0E 90 D2 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2023-10-12 19:07:35 → 2025-01-10 19:07:35
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 E5 8F 6A C0 F3 3D B4 0B A3 00 01 00 00 01 E5
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware