» DriverWizard.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

DriverWizard.exe

Driver Wizard

Driver Information Technology Co., Ltd.

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This is installed with Driver Wizard.

File name:

DriverWizard.exe

Publisher:

Driver-Soft Inc. (signed by Driver Information Technology Co., Ltd.)

Product:

Driver Wizard

Version:

11.00.1138

MD5:

7a53c5d1fe74e5322c0154214702b23a

SHA-1:

36c9f586ef13af16b68b5c51f9a721129b439f62

SHA-256:

2ce99d37b046fbff13bb1905e3e85e3c8a421fe151f61f9b8088182c9e338dac

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:40:26 AM UTC (today)

File size:

2.2 MB (2,336,592 bytes)

Product version:

11.00.1138

Original file name:

DriverWizard.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\driver-soft\driverwizard\driverwizard.exe

Digital Signature

Signed by:

Driver Information Technology Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

6/21/2011 7:00:00 PM

Valid to:

7/8/2014 6:59:59 PM

Subject:

CN="Driver Information Technology Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Driver Information Technology Co., Ltd.", L=ChangSha, S=HuNan, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

039E921BDD83DF3B2FAD7270F81427E1

File PE Metadata

Compilation timestamp:

5/17/2013 7:00:08 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:X58XX0rxF2ipXJPD5O8j0cWsxCNGFwcHRgPjgtrCVjNNJDm7eg:p8n2/x5j0FsxCEFw9bgtrCrNlmb

Entry address:

0x1000

Entry point:

68, 01, E0, 78, 00, E8, 01, 00, 00, 00, C3, C3, EF, 69, 1E, 8E, D2, 93, BC, 6F, DC, 2A, D9, 8E, BE, F5, B1, BF, F0, A4, FF, F8, 26, 65, E1, 32, 04, C4, 18, DC, 1A, 43, 03, EA, 81, 8F, D1, A2, EC, 50, 67, 0F, 31, 52, A9, 21, 12, 8A, 59, 3E, C5, 0E, EE, 7B, FC, 7A, F3, 21, 88, CD, FF, AC, 56, E3, CA, CC, 02, 6E, 55, F2, D4, E3, D8, DE, 91, 91, DA, 6E, 5D, 9A, 03, 86, 7B, 04, 83, F8, B2, 9D, A0, CF, EF, 64, 37, 10, 90, C5, 61, 89, 6A, 9D, 45, E0, 4A, 92, CA, 1E, 49, 4F, B0, 69, 4E, B1, E6, 4B, 35, 1E, 42, 31... 
[+]

Entropy:

7.9887

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.8 MB (1,859,584 bytes)

Scheduled Task

Task name:

Driver Wizard

Trigger:

Logon (Runs on logon)

Description:

Driver Wizard

The file DriverWizard.exe has been discovered within the following program.

Driver Wizard by Driver-Soft Inc.

Driver Wizard is an application designed to check the computer's installed drivers against a database of available drivers for a number of software and device hardware applications.

www.driverwizard.org

42% remove it

Scan DriverWizard.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.