home

corsairhid.exe

Corsair Utility Engine

Corsair Components, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Corsair Utility Engine’.
Publisher:
Corsair Components, Inc.  (signed and verified)

Product:
Corsair Utility Engine

Version:
1.14.43.0

MD5:
fb27621aed3344c3cccc5ba6efa460ef

SHA-1:
0e6720007e6e5814229cd18ce3ea3a654d95013d

SHA-256:
b8c5907849d5a3ae9982e5c716710cd59602b48a570f0fd03177c21af4cd3f33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 10:08:24 AM UTC  (today)

File size:
13.1 MB (13,740,864 bytes)

Product version:
1.14.43.0

Copyright:
Corsair Components, Inc. (c) 2015, All rights reserved

Original file name:
Corsair Utility Engine

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\corsair\corsair utility engine\corsairhid.exe

Digital Signature
Signed by:
Corsair Components, Inc.

Authority:
VeriSign, Inc.

Valid from:
5/14/2014 8:00:00 AM

Valid to:
6/9/2016 7:59:59 AM

Subject:
CN="Corsair Components, Inc.", O="Corsair Components, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3E089530E98D2AEF9B3F700F173510BF

File PE Metadata
Compilation timestamp:
12/25/2015 9:29:04 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:6xnzgQIjH/0b6d7Boi8T14rq1tfx9zu+gAUgNTmMq+rfsptnM3H65/hjiEU9c0GF:ieBoi8+rStfOgBmMEtM3H65/hdUEp

Entry address:
0x449FC8

Entry point:
E8, 47, 0B, 00, 00, E9, 02, 00, 00, 00, CC, CC, 6A, 14, 68, 78, 77, 04, 01, E8, 00, 09, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 2C, 24, 90, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, E0, C4, 09, 01, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, E4, C4, 09, 01, 75, 0A, 6A, 1F, E8, 75, 09, 00, 00, 59, EB, 3B, 83, 3D, E4, C4, 09, 01, 00, 75, 2C, 89, 35, E4, C4, 09, 01, 68, D0, B0, 90, 00, 68, BC, B0, 90...
 
[+]

Entropy:
6.8038

Code size:
5 MB (5,244,416 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Corsair Utility Engine

Command:
"C:\Program Files\corsair\corsair utility engine\corsairhid.exe" --autorun


Scan corsairhid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.