home

WoptiHWDetect.Sys

Wopti Optimization Master System Driver

成都共软网络科技有限公司

It runs as a Windows 64-bit kernel mode device driver named “WoptiHWDetect”.
Publisher:
SSN  (signed by 成都共软网络科技有限公司)

Product:
Wopti Optimization Master System Driver

Version:
1.2.7.829

MD5:
e7b87a0e2d008a3399207fb9ff6bdb99

SHA-1:
8bdb98414df52d93b2b26c2c0bab169a06a77db3

SHA-256:
9ef0b01fc72853a949ae4f52f2b6ded605a1b49d5c73a0205b8279f587be0e30

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/28/2024 7:44:42 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0723
7.2.364

File size:
10.6 KB (10,840 bytes)

Product version:
1.2.7.829

Copyright:
Copyright (C) 2000-2007 Wopti

Trademarks:
Wopti

Original file name:
WoptiHWDetect.Sys

File type:
Driver (Win64 SYS)

Common path:
C:\Program Files\wopti\woptihwdetect.sys

Digital Signature
Signed by:
成都共软网络科技有限公司

Authority:
WoSign, Inc.

Valid from:
10/19/2007 8:00:00 AM

Valid to:
10/19/2008 7:59:59 AM

Subject:
CN=成都共软网络科技有限公司, OU=Class 3 - for Microsoft Authenticode Signing, O=成都共软网络科技有限公司, L=成都市, S=四川省, C=CN

Issuer:
CN=WoSign Code Signing Authority, O="WoSign, Inc.", C=US

Serial number:
6BC36CB4371455144210E5084D64D281

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:whNRuKaz/vMFtvxO4SLvYiDqnNYtOVQerD0n:mdI/EFt5OLLvYiDskCrD0n

Entry point:
55, 8B, EC, 83, EC, 74, 56, 57, 6A, 0B, 59, 6A, 0D, BE, 20, 0A, 01, 00, 8D, 7D, C0, F3, A5, 59, 8D, 45, C0, 50, BE, 4C, 0A, 01, 00, 8D, 7D, 8C, 8D, 45, F4, F3, A5, 8B, 35, 88, 0B, 01, 00, 50, FF, D6, 8D, 45, 8C, 50, 8D, 45, EC, 50, FF, D6, 8B, 75, 08, 8D, 45, FC, 50, 33, FF, 57, 57, 68, 00, F1, 00, 00, 8D, 45, F4, 50, 57, 56, FF, 15, A4, 0B, 01, 00, 3B, C7, 7C, 26, 8D, 45, F4, 50, 8D, 45, EC, 50, FF, 15, A0, 0B, 01, 00, 3B, C7, 7C, 14, B8, 78, 07, 01, 00, 89, 46, 38, 89, 46, 70, C7, 46, 34, B4, 04, 01, 00...
 
[+]

Entropy:
6.4987

Developed / compiled with:
Microsoft Visual C++

Driver
Display name:
WoptiHWDetect

Type:
Kernel device driver (KernelDriver)


Scan WoptiHWDetect.Sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.