lycosa_win_driver_v3.00_eng.exe

Razer USA Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from drivers.razersupport.com and multiple other hosts.
Publisher:
Razer USA Ltd  (signed and verified)

MD5:
7d514258efc31ce6d72b363872fe157a

SHA-1:
8b8e2d3bc08ab579ca16c22394b35a469db26620

SHA-256:
fbd6fc63629bb7ccf0ad2df896bbaf78793873bed9e4fcdafd9490433610eaf3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:59:14 AM UTC  (today)

File size:
5.6 MB (5,893,464 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\lycosa_win_driver_v3.00_eng.exe

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
10/26/2009 1:00:00 AM

Valid to:
10/26/2012 1:59:59 AM

Subject:
CN=Razer USA Ltd, OU=Products, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Razer USA Ltd, L=Carlsbad, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5B3FD2C04B6404A49FA3578C6027D759

File PE Metadata
Compilation timestamp:
9/16/2008 4:17:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:NS0yVW3KPryW5gEWl68DmTfLJCVT8CAbP6zOu8TTP2WYswgduUfoHw1q7xgB:NS0wWaTL5yl68DMDJ6eOzOhTKjZD7X7i

Entry address:
0x1000

Entry point:
E8, 6F, 2B, 00, 00, 50, E8, 73, 36, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E5, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 7A, 48, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, DE, 38, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, AC, 69, 41, 00, 6A, 65, 56, E8, 24, 38, 01, 00, 6A, 01, 56, E8, FE, 37, 01, 00...
 
[+]

Code size:
80 KB (81,920 bytes)

The file lycosa_win_driver_v3.00_eng.exe has been seen being distributed by the following 3 URLs.

Scan lycosa_win_driver_v3.00_eng.exe - Powered by Reason Core Security