home

androidusb.sys

ALCATEL Android USB Driver

DriverDevelop.com

The file androidusb.sys by DriverDevelop.com has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit kernel mode device driver named “ADB Interface Driver”.
Publisher:
ALCATEL Inc  (signed by DriverDevelop.com)

Product:
ALCATEL Android USB Driver

Description:
ADB Interface

Version:
1.00 built by: WinDDK

MD5:
ab8e55156c1f892e8043f7fd9a4e0758

SHA-1:
45812da1074de61eef1263003e22d1cfe19a91de

SHA-256:
bd54db1933f007aa5de2124e481099157401ef12f5996b08c61b9c774a9d8eb6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/26/2024 10:38:05 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DriverDevelop.N
14.8.31.22

File size:
33.4 KB (34,192 bytes)

Product version:
1.00

Original file name:
androidusb.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\androidusb.sys

Digital Signature
Signed by:
DriverDevelop.com

Authority:
DriverDevelop.com

Valid from:
8/14/2009 11:02:01 PM

Valid to:
8/12/2019 11:02:01 PM

Subject:
E=ca@zndev.com, CN=DriverDevelop.com Signtools Test cert, OU=Dept. CodeSign CA, O=DriverDevelop.com, S=BeiJing, C=CN

Issuer:
E=ca@zndev.com, CN=DriverDevelop.com CA, OU=DriverDevelop.com CA, O=DriverDevelop.com, L=BeiJing, S=BeiJing, C=CN

Serial number:
011E

File PE Metadata
Compilation timestamp:
6/9/2011 1:36:50 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:+bVVZ1ev/CgQya19N911QcwHoH7p9pSl2T:+bVVZ1oCgLa19N9LQcwHobpbX

Entry address:
0x4B00

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 2B, 77, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, AE, FE, FF, FF, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, 05, C7, 16, 00, 00, 48, 8B, F9, 48, 8D, 0D, A5, 16, 00, 00, 48, 8D, 1D, AE, 16, 00, 00, 48, 3B, C1, 74, 45, 48, 3B, D8, 77, 40, 48, 8B, 43, 40, 48, 85, C0, 74, 18, 4C, 8B, 05, 4C, 23, 00, 00, 48, 8D, 0D, 57, 01, 00, 00, 4C, 8B, CB, 48, 8B, D7, FF, D0, EB, 12, 48, 8B, 15...
 
[+]

Entropy:
5.2392

Code size:
26 KB (26,624 bytes)

Driver
Display name:
ADB Interface Driver

Service name:
androidusb

Type:
Kernel device driver (KernelDriver)

Group:
Base


Remove androidusb.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.