Gridinsoft Logo
File Icon

The drivermax.exe (DriverMax Setup) File Analysis

Technical Analysis

File Name drivermax.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
98304:UJBXoUylp1E0GYaw7ZfxQNF4ZmTD7t7gpouKr2l9A5IoP5fjYvxN09KLKxGT1+GF:YjcM3YJdf0F4ZmT3jilY9nWcAtW4
Scanner Version 1.0.143.174
Database Version 2023-10-13 02:01:06 UTC

Suspicious File Detected

Detected by 4 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
6%
Detection Rate
7,527,888
File Size (bytes)
4/72
Engines Detected
2023-10-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
094eaf5f1725e6650730d7cca0fe5277
SHA1
4d9f324470b6c69bdeeedbeb5134d4961768c604
SHA256
84b01bcdaf54a7386627bd930a6f8b74d9c0751a711424b374adbb1c1210392f
SHA512
fc13009793f0f16c175470078d8a906fc40a07ddcfdd159174734d4015c79db52e7a5ebc8692427f87ae00577c947472b341b218b9e91d72bb1aa13f4e76a55d
ImpHash
884310b1928934402ea6fec1dbd3cf5e

Security Engines with Detections (4 of 72)

Malwarebytes
PUP.Optional.DriverMax Malicious
CrowdStrike
win/grayware_confidence_60% (W) Malicious
Jiangmin
RiskTool.Miner.ayg Malicious
Webroot
W32.HackTool.Gen Malicious
68 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: f77fb44deb65e1e24ac772efc3532d69
Fuzzy: 2424b30b6ab1e33a62ec3dad96ab3788
dHash: 68cc96e2e0c4f830
Image Base 0x00400000
Entry Point 0x0040a5f8
Compilation Time 1992-06-19 22:22:17
Checksum 0x0073a1e1 (Actual: 0x0073a1e1)
OS Version 1.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
kernel32, user32, oleaut32, advapi32, comctl32
Exports 0 functions
Resources 20 Resources
Sections 8 Sections

Digital Signatures

DigiCert Assured ID Root CA DigiCert Inc (US)
DigiCert Trusted Root G4 DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert (US)
GlobalSign Code Signing Root R45 GlobalSign nv-sa (BE)
GlobalSign GCC R45 EV CodeSigning CA 2020 INNOVATIVE SOLUTIONS GRUP SRL (RO)

Version Information

Comments This installation was built with Inno Setup.
CompanyName Innovative Solutions
FileDescription DriverMax Setup
FileVersion
LegalCopyright
ProductName DriverMax
ProductVersion 15.15.0.16
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
CODE 0x00001000 40,240 bytes 40,448 bytes 6.63 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 04FFDB46E50716EC8CB7DB42819802FD
DATA 0x0000b000 592 bytes 1,024 bytes 2.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BEEE52F18301950F82460D9FFE5AEC7E
BSS 0x0000c000 3,728 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0000d000 2,384 bytes 2,560 bytes 4.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BB5485BF968B970E5EA81292AF2ACDBA
.tls 0x0000e000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0000f000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 9BA824905BF9C7922B6FC87A38B74366
.reloc 0x00010000 2,244 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00011000 378,624 bytes 378,880 bytes 4.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ D36830F8BEFEDFFC9D107353F822641E
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 20 (377,476 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 371,728 bytes
98.5%
RT_STRING 6 2,710 bytes
0.7%
RT_RCDATA 1 44 bytes
0%
RT_GROUP_ICON 1 146 bytes
0%
RT_VERSION 1 1,268 bytes
0.3%
RT_MANIFEST 1 1,580 bytes
0.4%

Certificate Chain Analysis

Certificate #1
Subject DigiCert Trusted Root G4
DigiCert Inc
US
Issuer DigiCert Assured ID Root CA
Serial Number 19414496059604725969669510860671817818
Certificate #2
Subject DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
DigiCert, Inc.
US
Issuer DigiCert Trusted Root G4
Serial Number 9586110043380832440035821245782711899
Certificate #3
Subject DigiCert Timestamp 2022 - 2
DigiCert
US
Issuer DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Serial Number 16352681515936560713148055516499426650
Certificate #4
Subject GlobalSign GCC R45 EV CodeSigning CA 2020
GlobalSign nv-sa
BE
Issuer GlobalSign Code Signing Root R45
Serial Number 159159760011286741492753271723304908269
Certificate #5
Subject INNOVATIVE SOLUTIONS GRUP SRL
INNOVATIVE SOLUTIONS GRUP SRL
RO
Issuer GlobalSign GCC R45 EV CodeSigning CA 2020
Serial Number 19343798910780936062237880553
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
4 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware