home

driverhivetray.exe

DriverHive

Bootstrap Development, LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DriverHiveTray’.
Publisher:
Bootstrap Development, LLC.  (signed by Bootstrap Development, LLC)

Product:
DriverHive

Version:
3,0,7,1244

MD5:
24a0f7acf2feba6cad3d54e74bf03c3c

SHA-1:
35bf6910ada846caf8effc176683ed46dae61710

SHA-256:
2a69d14763933146a5f981ccd6d35ad879423c16b178ad7a46a08c9d5a9864b5

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 1:43:53 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
riskware program Program.Unwanted.1231
9.0.1.05190

File size:
2.3 MB (2,444,328 bytes)

Product version:
3,0,7,1244

Copyright:
Copyright (C) 2010 Bootstrap Development, LLC. All Rights Reserved.

Trademarks:
DriverHive is a trademark of Bootstrap Development, LLC.

Original file name:
DriverHive.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\driverhive\driverhivetray.exe

Digital Signature
Signed by:
Bootstrap Development, LLC

Authority:
Symantec Corporation

Valid from:
1/15/2016 7:00:00 PM

Valid to:
5/24/2016 7:59:59 PM

Subject:
CN="Bootstrap Development, LLC", O="Bootstrap Development, LLC", L=Boulder, S=Colorado, C=US, SERIALNUMBER=20071493613, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Colorado, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
599220844329B551B497CF0422CA30BF

File PE Metadata
Compilation timestamp:
1/17/2016 2:43:23 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:A9lU4szuaK9KvWOzIribhD1FUoDifoTh7vY:c1szvK9KuOzI0hDjUCUo9E

Entry address:
0x1DFE9C

Entry point:
55, 8B, EC, 83, C4, DC, 53, 33, C0, 89, 45, DC, 89, 45, EC, 89, 45, E0, B8, 7C, BF, 5D, 00, E8, A8, 9B, E2, FF, 8B, 1D, 88, CE, 5E, 00, 33, C0, 55, 68, 66, 01, 5E, 00, 64, FF, 30, 64, 89, 20, B9, 80, 01, 5E, 00, B2, 01, A1, 24, 0C, 57, 00, E8, B3, 0D, F9, FF, 8B, 15, 30, CF, 5E, 00, 89, 02, 33, D2, 55, 68, 3C, 01, 5E, 00, 64, FF, 32, 64, 89, 22, A1, 30, CF, 5E, 00, 8B, 00, E8, 15, 0E, F9, FF, 84, C0, 75, 0A, E8, 84, 53, E2, FF, E9, 36, 02, 00, 00, 6A, 3F, 68, 00, 00, 40, 00, 8D, 45, EC, 50, B8, CC, 01, 5E...
 
[+]

Entropy:
6.5693

Developed / compiled with:
Microsoft Visual C++

Code size:
1.9 MB (1,961,984 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DriverHiveTray

Command:
C:\Program Files\driverhive\driverhivetray.exe


Scan driverhivetray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.