home

ACLASUI.DLL

DriverDevelop.com

The module ACLASUI.DLL by DriverDevelop.com has been detected as a potentially unwanted program by 2 anti-malware scanners.
Publisher:
DriverDevelop.com  (signed and verified)

MD5:
3c4f3aa1d77eaf8b8deb2040ace9daf2

SHA-1:
71cf3d5d97a296ea2930b9222f9bbb9d65af3c59

SHA-256:
a4bdddfc2b22b13c0269eb1195804e5c016b0e2c6cc62f8122b4795a0271d351

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 11:02:05 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic.3e4
2016.0.3007

Reason Heuristics
PUP.DriverDevelop (M)
15.8.24.23

File size:
33.9 KB (34,688 bytes)

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Windows\System32\spool\drivers\x64\3\aclasui.dll

Digital Signature
Signed by:
DriverDevelop.com

Authority:
DriverDevelop.com

Valid from:
8/15/2009 6:02:01 AM

Valid to:
8/13/2019 6:02:01 AM

Subject:
E=ca@zndev.com, CN=DriverDevelop.com Signtools Test cert, OU=Dept. CodeSign CA, O=DriverDevelop.com, S=BeiJing, C=CN

Issuer:
E=ca@zndev.com, CN=DriverDevelop.com CA, OU=DriverDevelop.com CA, O=DriverDevelop.com, L=BeiJing, S=BeiJing, C=CN

Serial number:
011E

File PE Metadata
Compilation timestamp:
1/8/2011 12:12:59 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
384:LNJ6nHe2ZyA8P2/fFk6BoToJsOP01PxwbWps6R1G0PHt3w0GoN/UKlM/YJLF6jY:21gWFkeFUbwbWC6RbPH7DsKmOLFmY

Entry address:
0x2AF4

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 83, 01, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, CF, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, B1, 15, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, E4, 01, 00, 00, CC, CC, CC, CC...
 
[+]

Code size:
10.5 KB (10,752 bytes)

Remove ACLASUI.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.