Gridinsoft Logo
File Icon

The AdvancedPDFUtilitiesFree (VIRUS).exe (Advanced PDF Utilities Free Setup) File Analysis

Updated 2 months ago
Checked by Malaware Check
AdvancedPDFUtilitiesFree (VIRUS).exe

Technical Analysis

File Name AdvancedPDFUtilitiesFree (VIRUS).exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
196608:zTSu1nD0mqQQOq0u89VDszvzSyJ4lV6ij:zTR1DFqNJ89VQvs6ij
Scanner Version 1.0.211.174
Database Version 2025-03-26 00:01:03 UTC
⚠

Suspicious File Detected

Detected by 31 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
43%
Detection Rate
7,403,198
File Size (bytes)
31/72
Engines Detected
2025-03-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
a93526c2a45e827a5e63fd44952b8a76
SHA1
5faf05d1820fd29339adad396271b8383844f705
SHA256
9abbea2b0dfbc6674df5646a1b73551c9b7e18cdd669344e9929cc6e15e78220
SHA512
678d9340189ebdb68c23fc300c68e96b63d0e994709cff1ba0bec175c45b592b484c87dd5d87f617a03dd08654dd928613cb47cba30d2f1a884b08e02b4bb7de
ImpHash
483f0c4259a9148c34961abbda6146c1

Security Engines with Detections (31 of 72)

Bkav
W32.AIDetectMalware Malicious
Lionic
Adware.Win32.Bundler.2!c Malicious
MicroWorld-eScan
Application.Bundler.RelevantKnowledge.GV Malicious
FireEye
Application.Bundler.RelevantKnowledge.GV Malicious
CAT-QuickHeal
Trojan.Ghanarava.17380514512b8a76 Malicious
McAfee
Artemis!A93526C2A45E Malicious
Cylance
Unsafe Malicious
Sangfor
Adware.Win32.Agent.Vcv2 Malicious
Symantec
PUA.Gen.2 Malicious
Elastic
malicious (moderate confidence) Malicious
ESET-NOD32
Win32/Adware.RK.BZ Malicious
BitDefender
Application.Bundler.RelevantKnowledge.GV Malicious
Avast
Win32:Malware-gen Malicious
Emsisoft
Application.Bundler.RelevantKnowledge.GV (B) Malicious
VIPRE
Application.Bundler.RelevantKnowledge.GV Malicious
McAfeeD
ti!9ABBEA2B0DFB Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Webroot
W32.Adware.Gen Malicious
Google
Detected Malicious
Varist
W32/Relevant.AK.gen!Eldorado Malicious
Antiy-AVL
GrayWare/Win32.SystemHealer Malicious
Arcabit
Application.Bundler.RelevantKnowledge.GV Malicious
GData
Win32.Application.FusionCore.H Malicious
VBA32
TScope.Trojan.Delf Malicious
ALYac
Application.Bundler.RelevantKnowledge.GV Malicious
Malwarebytes
Malware.AI.3553154600 Malicious
CTX
exe.adware.bundler Malicious
MaxSecure
Trojan.Malware.282388450.susgen Malicious
Fortinet
Adware/RK Malicious
AVG
Win32:Malware-gen Malicious
DeepInstinct
MALICIOUS Malicious
41 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 30adcb5c0b2e3c35eaec2c110733c9f8
Fuzzy: c98f96d6ffe5af8d4eb0870c1dc20826
dHash: 92e0b496a6cada72
Image Base 0x00400000
Entry Point 0x00416478
Compilation Time 2012-07-09 13:41:29
Checksum 0x00000000 (Actual: 0x00717be4)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 17 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName PDFCore Co., Ltd.
FileDescription Advanced PDF Utilities Free Setup
FileVersion
LegalCopyright
ProductName Advanced PDF Utilities Free
ProductVersion
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 82,936 bytes 82,944 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C9BB3AFC1CEAAA31127CCFA204C657EF
.itext 0x00016000 3,048 bytes 3,072 bytes 6.01 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1BA5ADF2E1058C0460DCC814BA86FB32
.data 0x00017000 3,484 bytes 3,584 bytes 2.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D5B22EFF9E08EDAA95F493C1A71158C0
.bss 0x00018000 22,348 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0001e000 3,998 bytes 4,096 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B47EACA4C149EE829DE76A342B5560D5
.tls 0x0001f000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00020000 24 bytes 512 bytes 0.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3746F5876803F8F30DB5BB2DEB8772AE
.rsrc 0x00021000 45,568 bytes 45,568 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0C068968A47937DF029797002573267D

Resource Analysis

▼
Total Resources: 17 (44,474 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 4,640 bytes
10.4%
RT_STRING 6 3,200 bytes
7.2%
RT_RCDATA 4 33,988 bytes
76.4%
RT_GROUP_ICON 1 62 bytes
0.1%
RT_VERSION 1 1,208 bytes
2.7%
RT_MANIFEST 1 1,376 bytes
3.1%

Certificate Chain Analysis

▼
Certificate Information
Product Advanced PDF Utilities Free
Description Advanced PDF Utilities Free Setup

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
31 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware