home

huion_dr.exe

Tablet Driver for Windows

Shenzhen Huion Animatzon Technology Co.,Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Huion_Dr’.
Publisher:
Tablet Driver  (signed by Shenzhen Huion Animatzon Technology Co.,Ltd)

Product:
Tablet Driver for Windows

Description:
Tablet Client Driver

Version:
10, 30, 2010, 1

MD5:
ddf07af00887a309206fc3a2f4dffec6

SHA-1:
c4f31fd90d33a813602497dea7f797abac9a2fd3

SHA-256:
d41a1d24fe11b5d24cb07ee5afa309775d050ce231a913ea4f21012ea11d3417

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:55:57 AM UTC  (today)

File size:
40.3 KB (41,304 bytes)

Product version:
10, 30, 2010, 1

Copyright:
Copyright (c) 2000 - 2010

Original file name:
WTClient.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\huion_dr.exe

Digital Signature
Signed by:
Shenzhen Huion Animatzon Technology Co.,Ltd

Authority:
VeriSign, Inc.

Valid from:
8/4/2011 8:00:00 AM

Valid to:
8/4/2012 7:59:59 AM

Subject:
CN="Shenzhen Huion Animatzon Technology Co.,Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Shenzhen Huion Animatzon Technology Co.,Ltd", L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1971813C089CC588DE69A0BD9A8B77FB

File PE Metadata
Compilation timestamp:
10/30/2009 10:19:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:omErRgOBGormlBbIjCe9fyyjRPb/EPxL1poKJc8YJLypkEkd6jMMKeM6:omuRzGlIjCedykRPLE5L1po6wL3E2mB

Entry address:
0x18E9

Entry point:
55, 8B, EC, 6A, FF, 68, 88, 54, 40, 00, 68, C0, 24, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, AC, 50, 40, 00, 33, D2, 8A, D4, 89, 15, 58, 66, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 54, 66, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 50, 66, 40, 00, C1, E8, 10, A3, 4C, 66, 40, 00, 33, F6, 56, E8, 44, 0A, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 84, 08, 00, 00, FF, 15, A8, 50, 40, 00, A3, 58, 6B, 40, 00, E8...
 
[+]

Entropy:
5.2669

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
16 KB (16,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Huion_Dr

Command:
huion_dr.exe


Scan huion_dr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.