home

udutil02.exe

USB2.0 External Graphics Card with DVI Interface

Magic Control Technology Corp.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘udutil02’.
Publisher:
Magic Control Technology Corporation  (signed by Magic Control Technology Corp.)

Product:
USB2.0 External Graphics Card with DVI Interface

Version:
1, 2, 3, 0

MD5:
818be3a0fee8f560f622b0994c622a3d

SHA-1:
1f9f87ef46087ca01361dcbb559ad8d481663fe6

SHA-256:
01b42d2fbc21d0e4508ca8548623bbdefd884aa66faa456a2070e8dbd0699394

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:57:27 PM UTC  (today)

File size:
261.4 KB (267,640 bytes)

Product version:
1, 2, 3, 0

Copyright:
Copyright (C) Magic Control Technology Corp.

Original file name:
udutil02.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mct\u2d5055\utility\udutil02.exe

Digital Signature
Signed by:
Magic Control Technology Corp.

Authority:
VeriSign, Inc.

Valid from:
7/9/2009 2:00:00 AM

Valid to:
7/26/2012 1:59:59 AM

Subject:
CN=Magic Control Technology Corp., OU=GM' Secretary, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Magic Control Technology Corp., L=Chungho City, S=Chung Ho, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1F87CFC65226BC3DFA8A431AECD8F9A1

File PE Metadata
Compilation timestamp:
11/3/2009 7:39:50 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:s8XFhOnnN5uAHc2ZfoRmf9d6aYy4FChArErGZbTotClamm0Zvwr73mhI/cptMD0k:s8VSgGc2Zf4mlI9ioEIbs330Z20zavh

Entry address:
0x18561

Entry point:
E8, 23, 4C, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 9A, 1B, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, F5, 50, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 6D, 4C, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, BC, 0B, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, 4B, 1B, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AD, 6A, 16...
 
[+]

Code size:
176 KB (180,224 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
udutil02

Command:
C:\Program Files2\mct\u2d5055\utility\udutil02.exe


Scan udutil02.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.