» DriverUtility.exe
Overview
Analysis
File Details
Programs (1)

DriverUtility.exe

Driver Utility

Wuhan Jiduo Information Technology Co.,Ltd.

The application DriverUtility.exe by Wuhan Jiduo Information Technology Co.,Ltd has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Driver Utility by Driver-Soft Inc..

File name:

DriverUtility.exe

Publisher:

Driver-Soft Inc. (signed by Wuhan Jiduo Information Technology Co.,Ltd.)

Product:

Driver Utility

Version:

9.00.0186

MD5:

6c0a440499997be2c36b8d8e27e3b934

SHA-1:

75a6160ed1702a8b7bbe189bd4537d1336ff2f23

SHA-256:

05670de68f56442a1f75b9fe59c2af5a5ac86ad1bd0c2a6bb5db52b9797b1b47

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 2:30:06 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.2.12.17

File size:

3.3 MB (3,496,032 bytes)

Product version:

9.00.0186

Original file name:

DriverUtility.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\driver-soft\driverutility\driverutility.exe

Digital Signature

Signed by:

Wuhan Jiduo Information Technology Co.,Ltd.

Authority:

WoSign, Inc.

Valid from:

5/22/2008 3:00:00 AM

Valid to:

5/23/2010 2:59:59 AM

Subject:

CN=Driver-Soft.com, OU=Class 3 - for Microsoft Authenticode Signing, O="Wuhan Jiduo Information Technology Co.,Ltd.", L=Wuhan, S=Hubei, C=CN

Issuer:

CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:

79E59F0AC0FF47090A57C16B38B1BD

File PE Metadata

Compilation timestamp:

12/8/2009 6:17:33 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:8YUjBVbKhhIps0EYYspc+qQGTEnDeqHQdi5t6whR/fcq9d:1C1KhhIpsbCpc+qQEEnCPda6aR/fcqv

Entry address:

0x1000

Entry point:

68, 01, 50, 86, 00, E8, 01, 00, 00, 00, C3, C3, 6C, A6, 46, AB, 84, BF, 3B, 0D, 23, DB, 23, A7, 23, 7F, A4, 19, E4, D8, 77, A1, B5, 2C, 5A, 00, 5F, A9, 14, 6E, 9F, 4F, F1, 22, 01, 9D, CD, 00, CD, E2, B0, 7A, 21, 25, 12, F2, 7B, CB, 3A, 3A, 66, 32, 44, E9, FF, D9, B9, 0C, C7, 99, F0, 97, E5, B7, 83, 70, 2E, 40, 30, 49, 2A, DB, 60, 29, 87, B2, 6C, 36, A3, B9, B4, 09, 9E, D3, 46, C6, D9, 1D, BF, 05, AD, 5A, 87, 8C, 08, 38, D1, 7A, 66, 3D, 0C, 70, BC, 69, A9, E7, 09, CB, 3E, DC, B0, E0, 8C, E9, 80, 19, 4B, 47... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.6 MB (1,642,496 bytes)

The file DriverUtility.exe has been discovered within the following program.

Driver Utility by Driver-Soft Inc.

Driver Utility is an application designed to check the computer's installed drivers against a database of available drivers for a number of software and device hardware applications.

www.driverutility.com

43% remove it

Remove DriverUtility.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.