home

hwcore.sys

Shenzhen DriveTheLife Software Technology Co.Ltd

It runs as a Windows 64-bit kernel mode device driver named “HWCore”.
Publisher:
Shenzhen DriveTheLife Software Technology Co.Ltd  (signed and verified)

MD5:
3cd96302d44483ecfc3dc0a09dff0321

SHA-1:
23fb9f7a0e9dfacaa4cecd5b6d1d3731e7f442ba

SHA-256:
84471bc5e22008d6c3144dc9376bc1e712486122b9c98c51a97d5defd424c21f

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/18/2025 11:16:29 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
UnclassifiedMalware
17486

VIPRE Antivirus
VirTool.Win32.Obfuscator.XZ
25572

File size:
47.7 KB (48,808 bytes)

File type:
Driver (Win64 SYS)

Digital Signature
Signed by:
Shenzhen DriveTheLife Software Technology Co.Ltd

Authority:
VeriSign, Inc.

Valid from:
10/17/2011 8:00:00 AM

Valid to:
12/16/2014 7:59:59 AM

Subject:
CN=Shenzhen DriveTheLife Software Technology Co.Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shenzhen DriveTheLife Software Technology Co.Ltd, L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2ECD442E511E5CECF6B0CB49259C9ADF

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
768:GjgI4paKkOqdnRguA9QcfS7S6/4tadDaU4f6mpRiObXlCQZ0aJEhdSKa0I2DBnI5:GjP4sXOqoel7SsCasU2VNXv6aJOdeF8W

Entry point:
68, 52, C0, 1E, AC, E8, A5, 5B, 00, 00, 00, 00, 45, 78, 66, 49, 6E, 74, 65, 72, 6C, 6F, 63, 6B, 65, 64, 52, 65, 6D, 6F, 76, 65, 48, 65, 61, 64, 4C, 69, 73, 74, 00, 00, 00, 4F, 62, 52, 65, 66, 65, 72, 65, 6E, 63, 65, 4F, 62, 6A, 65, 63, 74, 42, 79, 4E, 61, 6D, 65, 00, 8D, 64, 24, 2C, E8, 26, D6, FF, FF, 0F, 89, 4C, F3, FF, FF, 51, 60, 9C, 8D, 64, 24, 28, 0F, 83, 5E, CF, FF, FF, 60, 31, C0, 88, 4C, 24, 0C, 8D, 64, 24, 20, E8, 03, D6, FF, FF, E8, 46, F7, FF, FF, 68, 59, C0, 1E, 08, E8, 79, 4D, 00, 00, 6B, 4F...
 
[+]

Entropy:
7.6030

Driver
Display name:
HWCore

Type:
Kernel device driver (KernelDriver)


Scan hwcore.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.