home

corsairhid.exe

Corsair Utility Engine

Corsair Components, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Corsair Utility Engine’.
Publisher:
Corsair Components, Inc.  (signed and verified)

Product:
Corsair Utility Engine

Version:
1.16.42.0

MD5:
aacd02795fa993701deca35b3af2711e

SHA-1:
c73a5e0c1ef6b6f50268d9fab518cd287556bc1a

SHA-256:
58f35258abea6e347c4f6e6f405b16f616a016ee92b8edaa426b9cc11330d352

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 10:22:03 AM UTC  (today)

File size:
14.2 MB (14,885,552 bytes)

Product version:
1.16.42.0

Copyright:
Corsair Components, Inc. (c) 2015, All rights reserved

Original file name:
Corsair Utility Engine

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\corsair\corsair utility engine\corsairhid.exe

Digital Signature
Signed by:
Corsair Components, Inc.

Authority:
DigiCert Inc

Valid from:
3/15/2016 6:00:00 PM

Valid to:
6/13/2019 7:00:00 AM

Subject:
CN="Corsair Components, Inc.", O="Corsair Components, Inc.", L=Fremont, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0748006027D1B26AB60A1396BFDF6378

File PE Metadata
Compilation timestamp:
3/23/2016 3:11:47 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
196608:2LFdUJlLWD6++JJ6jtR3HV2zBhSdDPb+eX:2LFdUJlL/96BRVdzbHX

Entry address:
0x488FB8

Entry point:
E8, 47, 0B, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 80, F4, 14, 01, E8, 02, 09, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 2C, 74, 95, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, F0, 6D, 1A, 01, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, F4, 6D, 1A, 01, 75, 0A, 6A, 1F, E8, 77, 09, 00, 00, 59, EB, 3B, 83, 3D, F4, 6D, 1A, 01, 00, 75, 2C, 89, 35, F4, 6D, 1A, 01, 68, 6C, 15, 96, 00, 68, 58, 15, 96, 00, E8...
 
[+]

Entropy:
6.8320

Code size:
5.3 MB (5,592,576 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Corsair Utility Engine

Command:
"C:\Program Files\corsair\corsair utility engine\corsairhid.exe" --autorun


Scan corsairhid.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.