home

drivergenius.exe

Driver Information Technology Co., Ltd.

Publisher:
Driver Information Technology Co., Ltd.  (signed and verified)

MD5:
9fa48ebd0820084eaf545ef029effcf9

SHA-1:
65c7cc253c792b69a6d14eb7443f1c431bae9e63

SHA-256:
582d3dae423c819cbe93513b7f84f42ca7e017679aef4ef56577192b6f8ec22d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 12:25:34 PM UTC  (today)

File size:
2.8 MB (2,962,216 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\driver.genius.professional.v14.0.0.337.multilingual.portable-hobo\app\drivergenius.exe

Digital Signature
Signed by:
Driver Information Technology Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/20/2014 7:00:00 PM

Valid to:
8/19/2017 6:59:59 PM

Subject:
CN="Driver Information Technology Co., Ltd.", O="Driver Information Technology Co., Ltd.", L=ChangSha, S=HuNan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6856C08CBAD2A7B35CDC2459DE044612

File PE Metadata
Compilation timestamp:
6/12/2014 1:51:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:ABiDMjYs4kYwlOAXm1m86wKSwaNkejHG6Pm3XiltbZvNUJ1oMC9JL951:ABd+PgdAkam6PmGCofJL9j

Entry address:
0x1000

Entry point:
68, 01, 50, 8A, 00, E8, 01, 00, 00, 00, C3, C3, FE, 39, 53, 96, 96, 11, 73, 39, 02, 17, E7, 28, D7, 6B, C3, 90, 33, 2F, 09, F1, C9, 57, A1, FA, 8A, 7D, 9D, E7, 19, 31, A0, 49, 37, 75, D3, 8C, 62, 15, 25, C7, 97, C7, 35, 49, E2, C6, 5F, 40, 55, B2, 7F, C1, 79, 39, E5, 0D, 60, B2, FD, 31, 0F, 27, F0, 60, 10, 4C, DC, CA, 3D, 0C, AD, 92, 65, E9, 0E, 88, 46, 2D, C6, D0, 00, 02, 52, AA, FF, 34, 55, 42, 2A, 27, 64, 6D, 04, C9, DE, FC, 6C, EE, 51, A3, 3B, AE, D3, D8, A7, C2, D4, B6, F5, CE, C4, 51, 50, 01, 43, E8...
 
[+]

Entropy:
7.4603

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.8 MB (1,937,408 bytes)

Scan drivergenius.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.