home

nusb3mon.exe

USB 3.0 Monitor

Renesas Electronics Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NUSB3MON’.
Publisher:
Renesas Electronics Corporation  (signed and verified)

Product:
USB 3.0 Monitor

Version:
2.0.28.0

MD5:
89b46bec5caad674e8881b3b00cd3b6a

SHA-1:
bb6fd3dad39963a2cd282ebf064c7d2010d571ee

SHA-256:
6140eedba9df4b9e0a0341d382275ee241c0dd49c203d45f5f69e795f95b9e31

Scanner detections:
26 / 68

Status:
Clean  (26 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/23/2024 12:21:25 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win32/Slugin
2015.04.08

Avira AntiVirus
W32/Slugin.A
3.6.1.96

avast!
Win32:Patched-HO [Trj]
2014.9-160204

AVG
Win32/Slugin.A
2017.0.2844

Baidu Antivirus
Virus.Win32.Patched.$dj
4.0.3.1624

Bkav FE
W32.OlayFara.PE
1.3.0.6379

Clam AntiVirus
Trojan.Spy-59563
0.98/21511

Comodo Security
TrojWare.Win32.Patched.P
21683

Dr.Web
Win32.Wplugin.1
9.0.1.035

ESET NOD32
Win32/Slugin
10.11438

Fortinet FortiGate
W32/Wplug.A
2/4/2016

F-Prot
W32/Slugin.B
v6.4.7.1.166

F-Secure
Gen:Variant.Buzy.298
11.2016-04-02_5

IKARUS anti.virus
Trojan.Win32.Patched
t3scan.1.8.9.0

K7 AntiVirus
Trojan
13.202.15516

McAfee
W32/Wplugin
5600.6500

Microsoft Security Essentials
Virus:Win32/Slugin.A
1.1.11502.0

Norman
Agent.VDAZ
11.20160204

Qihoo 360 Security
Win32/Virus.a04
1.0.0.1015

Rising Antivirus
PE:Win32.Agent.ey!1474842
23.00.65.16202

Sophos
W32/Slugin-A
4.98

Total Defense
Win32/Slugin.A
37.0.11536

Trend Micro House Call
PE_WPLUG.A
7.2.35

Trend Micro
PE_WPLUG.A
10.465.04

Vba32 AntiVirus
Trojan.Patched.dj
3.12.26.3

ViRobot
Win32.Patched.N[h]
2014.3.20.0

File size:
110.6 KB (113,288 bytes)

Product version:
2.0.28.0

Copyright:
(C) 2010 Renesas Electronics Corporation

Original file name:
nusb3mon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\renesas electronics\usb 3.0 host controller driver\application\nusb3mon.exe

Digital Signature
Signed by:
Renesas Electronics Corporation

Authority:
VeriSign, Inc.

Valid from:
4/22/2010 7:00:00 AM

Valid to:
4/23/2011 6:59:59 AM

Subject:
CN=Renesas Electronics Corporation, OU=Quality Assurancs Division, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Renesas Electronics Corporation, L=Kawasaki, S=Kanagawa, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6DF38C00071DD66C20838DB081346A51

File PE Metadata
Compilation timestamp:
11/12/2010 6:19:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:39ne+XhuVj+yuom7i+6rzooTgMVybRAPyZYuBGgKbaDPC3:Ne+aokXIMVymPa5Ke0

Entry address:
0x3154

Entry point:
E8, CA, 21, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 83, EC, 08, 89, 7D, FC, 89, 75, F8, 8B, 75, 0C, 8B, 7D, 08, 8B, 4D, 10, C1, E9, 07, EB, 06, 8D, 9B, 00, 00, 00, 00, 66, 0F, 6F, 06, 66, 0F, 6F, 4E, 10, 66, 0F, 6F, 56, 20, 66, 0F, 6F, 5E, 30, 66, 0F, 7F, 07, 66, 0F, 7F, 4F, 10, 66, 0F, 7F, 57, 20, 66, 0F, 7F, 5F, 30, 66, 0F, 6F, 66, 40, 66, 0F, 6F, 6E, 50, 66, 0F, 6F, 76, 60, 66, 0F, 6F, 7E, 70, 66, 0F, 7F, 67, 40, 66, 0F, 7F, 6F, 50, 66, 0F, 7F, 77, 60, 66, 0F, 7F, 7F, 70, 8D, B6, 80, 00, 00, 00, 8D, BF...
 
[+]

Entropy:
5.7994

Code size:
44 KB (45,056 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NUSB3MON

Command:
"C:\Program Files\renesas electronics\usb 3.0 host controller driver\application\nusb3mon.exe"


Scan nusb3mon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.