drivermagician.exe

Driver Magician

GoldSolution Software, Inc.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.filepuma.com and multiple other hosts.
Publisher:
GoldSolution Software, Inc.

Product:
Driver Magician

Description:
Driver Magician Setup

Version:
4.82

MD5:
01eb93d3692f9a1a705102d860810701

SHA-1:
d0070916e25c13191dea0df8f0defca615ab03ba

SHA-256:
291c124fe20be1bb4d2002186d850685d28892c67a4b348a1761830d066cfa0d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 1:37:31 PM UTC  (today)

File size:
4.3 MB (4,526,927 bytes)

Product version:
4.82

Copyright:
Copyright © 2003-2016 GoldSolution Software, Inc.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\drivermagician.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:4KusBFthivcrmEwNBzwXnibqNHUFcu3lumwIICdSvOfr:PusBnUvcyECFwXibVFGmwIIESvOD

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9986

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file drivermagician.exe has been seen being distributed by the following 10 URLs.

http://www.filepuma.com/file/1481756873c11243/driver_magician_4.82/.../0/

http://high.software.dn.naver.com/56736a82ccf4d7098f577a14f81bc876/.../DriverMagician.exe

http://www.filepuma.com/file/1477624727c11243/driver_magician_4.82/.../0/

http://dw.uptodown.com/dwn/feRpM0SvGGtO9BBzjOCoOoWVS9NWuBf5MI-FTpGhqQ38UGL7gcJVbEU1l1-A9diRID7D5Cje17q3GH3LvCnGSO7_MDVc2kgSsZQZhqDxvZWnzNEg9zBSwKrImDYOvy-y/PQStTg_CXCiUuV7HynqZqe0izyZOltb63EAISrUGEU6Rvchi4ngRE152fpOVaUtwfZiKYkK7rJo8YN6FoE1Ns9OQzlpWhdVq8_m5PPk45cH4cvO2FdLVh-6F64lQ2Lre/Owvik-GAgefgg1w8o9UvmScm0thoX-VDlr1iIvJc3W1r6PUT2WRr-qOirGr-ZyIzUzId3w1cFj5vdIXmaSYac69Qbq-Wt5dOyAWcKuuW0hPRVRZrXwgnIjG__m48z000/.../

http://driver-magician.software.informer.com/.../

https://dw.uptodown.com/dwn/UVsJtOqVuUcQvU08DzZ0ieKMur1Qctexcbp--Slx24MizZOvSrkhDi5lPqi-bAAdQ5K60bidDExcsDkJUSuQJLITmyp3nM1AxrkNIVW7p2cD8pk10BFQLedmETFYDZvr/KaCnzF1pJ38EQXCtP2v0cnqcfxCiaCHIpD1HIp9qTShdx-lW8gmMs-qKvOFoHo5L95oz8THsE15If-_JOe8-b8Ic6w0HsRF8L1GF7vLbj1HxtgywF7Vp0K-dUGKnRD0B/1JNnx-MYAE-mzLVlmc9MmpqPKJR0qd_xMB49OX-1Z3-DDekHosdH56WgJhxw0AQznWSELjqCIO1mFGfOVyYJdqO5deKKlq2AljoY9LzR16MMlTxNsvwGZ9_uX3uknjyQ/.../

Scan drivermagician.exe - Powered by Reason Core Security