Gridinsoft Logo

The udsstub.sys (USBDeviceShare Device Stub) File Analysis

Updated 2 months ago
Checked by Malaware Check
udsstub.sys

Technical Analysis

File Name udsstub.sys
File Type
PE32 executable (native) Intel 80386, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-03-29 23:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
16,000
File Size (bytes)
2025-03-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bb424a118a3e8202db3bd0d5cab20246
SHA1
31d9d07b68239108b0e0a4f824e58443eac6f60e
SHA256
c6bf45205d10fef34afc94b1b79ed29cefac7a4d107c588be0156bc6ba25b1d1
SHA512
471f05d767e1b9dc6e882142572baeab6209363cc4939c6eeee9c34b3574f76353b9d6c3adbf29059468134f70e71379ef0bf63226203b4a00963dc0e5a25ec8
ImpHash
a6ed4a1b50185ee6f11b8a34d287ad88

PE Analysis

Basic Information

▼
Image Base 0x00010000
Entry Point 0x00012c37
Compilation Time 2012-06-18 08:28:52
Checksum 0x00008b13 (Actual: 0x00008b13)
OS Version 5.1
PEiD Signatures PE32 executable (native) Intel 80386, for MS Windows
PDB Path l:\sysnucleus\work\project2\sourcecode\func\objfre_wxp_x86\i386\udsstub.pdb
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
ntoskrnl, HAL, WMILIB
Exports 0 functions
Resources 2 Resources
Sections 7 Sections

Version Information

▼
CompanyName SysNucleus
FileDescription USBDeviceShare Device Stub
FileVersion 1.4.0.1
InternalName udsstub.sys
LegalCopyright © 2012 SysNucleus. All rights reserved.
OriginalFilename udsstub.sys
ProductName USBDeviceShare
ProductVersion 1.4.0.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00000480 5,395 bytes 5,504 bytes 6.29 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C16E84AF3172B97AEB626A986C21688F
.rdata 0x00001a00 596 bytes 640 bytes 4.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_READ F4B7BC047125C5B7E720C98142ADED95
.data 0x00001c80 76 bytes 128 bytes 1.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C90BFE0CE0BD0217E07033F2E63EB76D
PAGE 0x00001d00 3,678 bytes 3,712 bytes 6.22 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E9105AC1991893D5D3849B7DD374B705
INIT 0x00002b80 1,778 bytes 1,792 bytes 5.58 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0001826B66DC6F07B799806EE7593F46
.rsrc 0x00003280 2,224 bytes 2,304 bytes 6.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E62B93D85285202212B79C07714D2D6A
.reloc 0x00003b80 652 bytes 768 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B7315F82B7CF19CC18E4C408DF8E5141

Resource Analysis

▼
Total Resources: 2 (2,006 bytes)
Resource Type Count Total Size Percentage
MOFDATA 1 1,234 bytes
61.5%
RT_VERSION 1 772 bytes
38.5%

Certificate Chain Analysis

▼
Certificate Information
Product USBDeviceShare
Description USBDeviceShare Device Stub
File Version 1.4.0.1
Original Name udsstub.sys
Internal Name udsstub.sys
Copyright © 2012 SysNucleus. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware