home

corsairhid.exe

Corsair Utility Engine

Corsair Components, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Corsair Utility Engine’.
Publisher:
Corsair Components, Inc.  (signed and verified)

Product:
Corsair Utility Engine

Version:
1.16.42.0

MD5:
b0b05b503ee6a71f4159d35591d4e347

SHA-1:
447010f3c9c634a20fdbb577cd6217d94f5fb161

SHA-256:
e425b6e7ec0e8e5ca639ae5fee60cb3aaf15a873a653988ac83c2ba54987ecd5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:05:46 AM UTC  (today)

File size:
14.2 MB (14,885,552 bytes)

Product version:
1.16.42.0

Copyright:
Corsair Components, Inc. (c) 2015, All rights reserved

Original file name:
Corsair Utility Engine

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\corsair\corsair utility engine\corsairhid.exe

Digital Signature
Signed by:
Corsair Components, Inc.

Authority:
DigiCert Inc

Valid from:
3/16/2016 7:00:00 AM

Valid to:
6/13/2019 7:00:00 PM

Subject:
CN="Corsair Components, Inc.", O="Corsair Components, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0748006027D1B26AB60A1396BFDF6378

File PE Metadata
Compilation timestamp:
3/23/2016 4:11:47 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x488FB8

Entry point:
E8, 47, 0B, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 80, F4, 14, 01, E8, 02, 09, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 2C, 74, 95, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, F0, 6D, 1A, 01, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, F4, 6D, 1A, 01, 75, 0A, 6A, 1F, E8, 77, 09, 00, 00, 59, EB, 3B, 83, 3D, F4, 6D, 1A, 01, 00, 75, 2C, 89, 35, F4, 6D, 1A, 01, 68, 6C, 15, 96, 00, 68, 58, 15, 96, 00, E8...
 
[+]

Entropy:
6.8320

Code size:
5.3 MB (5,592,576 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Corsair Utility Engine

Command:
"C:\Program Files\corsair\corsair utility engine\corsairhid.exe" --autorun


Scan corsairhid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.