home

corsairhid.exe

Corsair Utility Engine

Corsair Components, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Corsair Utility Engine’.
Publisher:
Corsair Components, Inc.  (signed and verified)

Product:
Corsair Utility Engine

Version:
1.16.42.0

MD5:
a6a0a1e2249534c5668fdb7797b4027d

SHA-1:
aacf31d4bb7794248279dd94fc56ea33dda8dd7e

SHA-256:
e5b3bfa139b37eef389e5e3ceb45d8ff93c7a1e510275bdf73efc25adfa17836

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 10:24:19 AM UTC  (today)

File size:
14.2 MB (14,885,552 bytes)

Product version:
1.16.42.0

Copyright:
Corsair Components, Inc. (c) 2015, All rights reserved

Original file name:
Corsair Utility Engine

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\corsair\corsair utility engine\corsairhid.exe

Digital Signature
Signed by:
Corsair Components, Inc.

Authority:
DigiCert Inc

Valid from:
3/15/2016 6:00:00 PM

Valid to:
6/13/2019 7:00:00 AM

Subject:
CN="Corsair Components, Inc.", O="Corsair Components, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0748006027D1B26AB60A1396BFDF6378

File PE Metadata
Compilation timestamp:
3/23/2016 3:11:47 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
196608:uLRdUJlLWD6++JJ6jtR3HV2zBhSdDPb+eX:uLRdUJlL/96BRVdzbHX

Entry address:
0x488FB8

Entry point:
E8, 47, 0B, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 80, F4, 14, 01, E8, 02, 09, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 2C, 74, 95, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, F0, 6D, 1A, 01, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, F4, 6D, 1A, 01, 75, 0A, 6A, 1F, E8, 77, 09, 00, 00, 59, EB, 3B, 83, 3D, F4, 6D, 1A, 01, 00, 75, 2C, 89, 35, F4, 6D, 1A, 01, 68, 6C, 15, 96, 00, 68, 58, 15, 96, 00, E8...
 
[+]

Code size:
5.3 MB (5,592,576 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Corsair Utility Engine

Command:
"C:\Program Files\corsair\corsair utility engine\corsairhid.exe" --autorun


Scan corsairhid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.