home

drivenum.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.grc.com.
MD5:
f1453efa83b3de45df72c3ead038bc84

SHA-1:
2d3aba1bea782d45ebf8bc45c07cee5ec077fda7

SHA-256:
b377bbe4391664744945f8835a94d378eb9b87a56d6bfad07824bfc6ed4cf74b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 10:24:21 AM UTC  (today)

File size:
9.8 KB (10,071 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\drivenum.exe

File PE Metadata
Compilation timestamp:
9/1/1973 2:03:00 PM

OS version:
1566.52108

OS bitness:
Win64

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:IDcYkGNxBVBdQkMEUQ3wkeXBr13VEuyUnXjjUzBV97Y+tMjTBodaNmWUMc:CkWxzBOzksbTjjAT7ujFodGmWUf

Entry point:
4D, 5A, 57, 01, 14, 00, 00, 00, 04, 00, E6, 06, FF, FF, 52, 09, 40, 00, FF, FF, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1E, 06, 8C, CB, BA, 78, 02, 03, DA, FC, 33, F6, 33, FF, 4B, 8E, DB, 8D, 87, D9, 06, 8E, C0, B9, 08, 00, F3, A5, 4A, 75, EB, 8E, C3, 8E, D8, 33, FF, BE, 32, 00, 05, 66, 02, 0E, 50, 6A, 0D, 8C, C8, CB, FF, 25, 7A, 01, FE, 82, FD, 82, FB, 82, F7, 82, EF, 82...
 
[+]

Entropy:
7.9407  (probably packed)

The file drivenum.exe has been seen being distributed by the following URL.

https://www.grc.com/dev/.../DrivEnum.exe

Scan drivenum.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.