home

update160614.exe

DriverMax

Innovative Solutions Grup SRL

The application update160614.exe, “DriverMax Setup ” by Innovative Solutions Grup SRL has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
Innovative Solutions   (signed by Innovative Solutions Grup SRL)

Product:
DriverMax

Description:
DriverMax Setup

MD5:
eb254586c780dd8c3e4c7753160af04a

SHA-1:
16b8f27da17a75a855d4f56176e867fd0ecd911a

SHA-256:
f1551c45d0f0670ab49d5c21f14272538ab5dbd300d67c01de39a5fde4752592

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
1/14/2025 10:31:00 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DriverMax.Innovati.Installer.Meta (L)
16.6.16.18

File size:
5.1 MB (5,336,752 bytes)

Product version:
8.23.0.450

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\update160614.exe

Digital Signature
Signed by:
Innovative Solutions Grup SRL

Authority:
GlobalSign nv-sa

Valid from:
5/9/2016 10:32:29 AM

Valid to:
5/10/2017 10:32:29 AM

Subject:
CN=Innovative Solutions Grup SRL, O=Innovative Solutions Grup SRL, L=Bucharest, S=Bucharest, C=RO

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11218B1A0626519F5DB62A3B7FECA1E024B0

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:3JBIomdyPGYBl+Wx1pgRjhTMDEX9vHc5zEYVYPAEr9AljJQS4IqGWA:komdyPfvNgXFX1IFV0A8QjJQQtWA

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file update160614.exe has been seen being distributed by the following 7 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=876523085a428b6e98306c4250a522f3&upv=dac0c0918aab89298590592bec5052a7&z=download-cpd&sk=648&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA81C42AA7B2AB56E85BF65B1AFD3DBC465621BCB23EE1DC1D5F74168CFCCD45C8224BEF475CED9BC10AC8914C8D4541EB4E2120E0EF1E83B44E82D76EF9DAD1A4FC3B28B56A0E7F44A2B146EFE0BAAF9DF2B52975B8F7770DD687A372B14961FCC3E6124E39B242110F3FA2955B0E70320A4F64FFDA9F6B8EF44AA579994B027B3C8E60168AD63C8E740ED49CC7D67CC2&h=1B60716B670A5EBFF49CD0B4F6B5FDCF9832781CB9B56E1912280D873187B935&directdownload=1&f=55238&d=http://www.drivermax.es/.../drivermax.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=aa378e6eb9bfc786110b14b452fd52a8&upv=9e360e7c953c75b40623b32131ea3698&z=download-cpd&sk=648&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA81C42AA7B2AB56E85BF65B1AFD3DBC465621BCB23EE1DC1D5F74168CFCCD45C8224BEF475CED9BC10AC8914C8D4541EB4E2120E0EF1E83B44E82D76EF9DAD1A45EFA1A145FF6D6F6A022F1F0EDF61EC0E0F543A6F73B88F1AA123089210B7A0210971682F22C9E768A6924131C04086140BD71251D88B2C7D3F86EEAB31E64281FCD1DE44BFDED66CDFBB8566F6D54AF&h=BB5C86B8584DB320955AE347322823EF4FE5DCBCA2025EBD44F8BFEC66E8E67F&directdownload=1&f=55238&d=http://www.drivermax.es/.../drivermax.exe

http://www.drivermax.es/.../drivermax.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=CO&sid=98ffaff7fd5248df9ea7de0ec1ebb440&upv=0c5d08cf4765b79637fdb12fdd4f282e&z=download-cpd&sk=662&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA81C42AA7B2AB56E85BF65B1AFD3DBC465621BCB23EE1DC1D5F74168CFCCD45C8224BEF475CED9BC10AC8914C8D4541EB4E2120E0EF1E83B44E82D76EF9DAD1A42ECD5D6E1BD62FC88C60EA7AF68DBB2BAFCF4CF82AA9B7DC796D723FB374C234E281A4C2459B703B1A4D1F0735530FB926AAAC6B586833F052CAF1BBF163659CA320C0E9190776D8C5EB22E5240C5D1E&h=5EA5682CCA575FA63C6BC40978E5999D5D465BAAAD4FA459A97E7623401BD276&directdownload=1&f=55238&d=http://www.drivermax.es/.../drivermax.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=MX&sid=21fdd97982e10fb50fa32f497bb685bc&upv=11a749acfbac01ac88640fb55501a967&z=download-cpd&sk=3294&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA81C42AA7B2AB56E85BF65B1AFD3DBC465621BCB23EE1DC1D5F74168CFCCD45C8224BEF475CED9BC10AC8914C8D4541EB4E2120E0EF1E83B44E82D76EF9DAD1A4F384313C1CE5D98D6F42CC9D39E33E52137CD23F96751CDAF48716863370D5B36884CBBC4F20B3506E92594F5AC169BDE17FBA9BA0F5A9EC5937898F277E9937C9FEDC893EBD9635BC486AA4AD321B56&h=CC511F70E3A60640B2ECDFB9918E8C09C778EA0DC8E604C3D92B36A8D77AB95E&directdownload=1&f=55238&d=http://www.drivermax.es/.../drivermax.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=PE&sid=1ae76bb21611229ebcbfe5c83d3438d3&upv=f3e7cc46c4c9333c2ecd64ad9743c252&z=download-cpd&sk=666&abp=0&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA81C42AA7B2AB56E85BF65B1AFD3DBC465621BCB23EE1DC1D5F74168CFCCD45C8224BEF475CED9BC10AC8914C8D4541EB4E2120E0EF1E83B44E82D76EF9DAD1A44FED1696128569D96108D91F8179170316989CFF822BE1FEEF3B5271A67A4B8866A64F357879A18F033E4D914BB64422B4CA409C21540E1505069D82194C29289153B0C0F99BF202B203620DBA87E1D5&h=F65AFF6F7688DE7E310A191743C21EADB9CDC16B6061698D92051A0019330E1A&directdownload=1&f=55238&d=http://www.drivermax.es/.../drivermax.exe

http://www.drivermax.com.br/.../drivermax.exe

Remove update160614.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.