home

DriverGenius.exe

Driver Genius Professional Edition

Wuhan Jiduo Information Technology Co.,Ltd.

The application DriverGenius.exe by Wuhan Jiduo Information Technology Co.,Ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Driver-Soft Inc.  (signed by Wuhan Jiduo Information Technology Co.,Ltd.)

Product:
Driver Genius Professional Edition

Version:
9.00.0182

MD5:
f460e7f4449f392a8ddbd98de98565ce

SHA-1:
1e13a869f9e3e0ff877ade578f9cf359cf68fd52

SHA-256:
ce9bbbcb6f871ae33ef6719aa2310dba5151c4db406b22281ff65cfebb51c585

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 12:47:58 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.1.13.5

File size:
3.4 MB (3,525,248 bytes)

Product version:
9.00.0182

Copyright:
Copyright (C) 2002-2009 Driver-Soft Inc.

Original file name:
DriverGenius.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\driver-soft\drivergenius\drivergenius.exe

Digital Signature
Signed by:
Wuhan Jiduo Information Technology Co.,Ltd.

Authority:
WoSign, Inc.

Valid from:
5/21/2008 9:00:00 PM

Valid to:
5/22/2010 8:59:59 PM

Subject:
CN=Driver-Soft.com, OU=Class 3 - for Microsoft Authenticode Signing, O="Wuhan Jiduo Information Technology Co.,Ltd.", L=Wuhan, S=Hubei, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
79E59F0AC0FF47090A57C16B38B1BD

File PE Metadata
Compilation timestamp:
10/19/2009 12:31:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:RgjcWmqcbQ9dyO3b3YNI4sDRgof5IJU9VlDPhg/db+ZhA5:RzWvmwdyKYIt9Vla/db+8

Entry address:
0x1000

Entry point:
68, 01, 40, 87, 00, E8, 01, 00, 00, 00, C3, C3, 83, D5, D8, 86, 61, 95, 53, 71, 12, 75, 8C, A1, D8, B5, 88, C0, B8, ED, 94, 4A, 77, 10, C1, 11, 6D, F9, B0, 9B, 72, 04, B4, 64, 4E, A8, 65, 4E, D1, 55, 30, 3D, F4, CD, 8F, A2, 6B, 74, 58, 7F, ED, 54, 75, F1, 1D, B1, EF, BA, E1, 17, FE, C0, B8, AA, 2B, BC, 61, CD, D3, AE, C2, 53, 1A, 32, F3, 30, 72, FC, 81, 01, 29, 44, CA, E6, E7, C4, 72, DE, D3, 1D, 56, 84, 60, 51, C8, 38, C4, 90, 51, 6A, 00, EA, 35, 8F, B2, 64, 95, 2E, 9E, 7B, D8, 01, 3C, 99, 9F, FF, C8, 63...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.6 MB (1,642,496 bytes)

Remove DriverGenius.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.