motusvc.exe

Mark of the Unicorn

It runs as a separate (within the context of its own process) windows Service named “MOTU Hardware Service”.
Publisher:
Mark of the Unicorn  (signed and verified)

MD5:
9190bb312bab5e9291b6431b5de41bdc

SHA-1:
24298abcb1f927b3d4212ea4fcd9620a884831f8

SHA-256:
a3d0df645a52507617f02af15fb9fb047c9bbf498019a4b7d5c44eb6048e36e1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:55:49 PM UTC  (today)

File size:
34.8 KB (35,632 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\motu\motusvc.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
9/11/2013 2:00:00 AM

Valid to:
9/27/2016 1:59:59 AM

Subject:
CN=Mark of the Unicorn, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mark of the Unicorn, L=Cambridge, S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7B52F61789C17619EBCA8529C94628AA

File PE Metadata
Compilation timestamp:
11/7/2013 10:35:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
768:TH7Sd8yRRt+ZZ6HAo4cxD0XfmZGmI9arth4SPOvjeWC:j8sZZ6jXD0PmZGmMartjO7C

Entry address:
0x4484

Entry point:
E8, 7A, 04, 00, 00, E9, B3, FD, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, A8, 73, 40, 00, 89, 0D, A4, 73, 40, 00, 89, 15, A0, 73, 40, 00, 89, 1D, 9C, 73, 40, 00, 89, 35, 98, 73, 40, 00, 89, 3D, 94, 73, 40, 00, 66, 8C, 15, C0, 73, 40, 00, 66, 8C, 0D, B4, 73, 40, 00, 66, 8C, 1D, 90, 73, 40, 00, 66, 8C, 05, 8C, 73, 40, 00, 66, 8C, 25, 88, 73, 40, 00, 66, 8C, 2D, 84, 73, 40, 00, 9C, 8F, 05, B8, 73, 40, 00, 8B, 45, 00, A3, AC, 73, 40, 00, 8B, 45, 04, A3, B0, 73, 40, 00, 8D, 45, 08, A3, BC, 73, 40...
 
[+]

Entropy:
6.4562

Code size:
15.5 KB (15,872 bytes)

Service
Display name:
MOTU Hardware Service

Service name:
MotuSvc

Description:
Adjusts the computer's Power Options during video capture and playback to prevent errors which can result if some processor cores are in certain low-power states. Stopping or disabling this service c

Type:
Win32OwnProcess


Scan motusvc.exe - Powered by Reason Core Security