A new malware variant discovered from Microsoft.NET that use trusted application InstallUtil.exe. Malicious files are highly obfusticated which is very difficult to analyze its functions until and unless to deobfuscate its string, methods, and its structure. It uses the familiar file format such as. pdf and images to Hiding Malware with password protection and sends it across to the victim and users are misled by. executable file icons. The malware uses some trusted system process to inject the malicious code into the victims machine without being caught by security tools.”]
Source: https://gbhackers.com/hiding-malware-legitimate-tool/