» 006bc8fb_19a8_crypt_io_copy.tmp
Overview
Analysis
File Details

006bc8fb_19a8_crypt_io_copy.tmp

DAEMON Tools

Duplex Secure Ltd

File name:

Publisher:

DT Soft Ltd. (signed by Duplex Secure Ltd)

Product:

DAEMON Tools

Description:

SCSI miniport

Version:

4.30.0.0 built by: WinDDK

MD5:

2247bca1257db3a2318cbf282903a7b8

SHA-1:

6af05ae2692b4afeb4ed390d1c0862c51f145092

SHA-256:

fcd2db2e28b7b8ee10661abb9cdba7a9fb05ec942193503d1496802636b0b10a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/13/2025 1:27:28 AM UTC (today)

File size:

255.5 KB (261,616 bytes)

Product version:

4.30.0.0

Language:

Language Neutral

Common path:

C:\ProgramData\kaspersky lab\kes10\temp\crypt\006bc8fb_19a8_crypt_io_copy.tmp

Digital Signature

Signed by:

Duplex Secure Ltd

Authority:

VeriSign, Inc.

Valid from:

6/27/2007 2:00:00 AM

Valid to:

8/23/2010 1:59:59 AM

Subject:

CN=Duplex Secure Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Duplex Secure Ltd, S=Nevis, C=KN

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3217B318D8B2B1501B3711EE65205704

File PE Metadata

Compilation timestamp:

7/21/2008 2:17:14 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

8.0

Entry address:

0x35844

Entry point:

E9, 9B, F9, FF, FF, CC, CC, CC, 68, 43, 39, 9B, 5D, E8, 7A, 2F, 00, 00, 8E, AF, AE, 62, 52, B8, EC, 6D, FC, 46, F8, F8, 6A, 0E, 9D, D4, A7, 93, 9C, 67, 77, 43, B4, 4F, 03, 0E, 87, 83, FA, A3, 6E, EA, 32, E0, 1B, BE, EC, EF, F8, AF, 8A, D5, 8F, 3F, A6, 95, 44, 9C, E1, 6D, BB, 41, 1A, 9C, 36, BB, A1, 72, 90, AC, 5A, 79, EC, BF, 09, BC, E5, 63, C9, B4, 67, 8C, 09, A6, 6A, 98, CB, 5C, 73, FF, FD, 85, 23, 70, E2, 1A, BB, E7, 4B, 7C, 77, 70, 65, 28, 23, 54, 0F, 7A, 6F, 6E, 5E, A5, A7, E5, 25, D4, 80, 2B, E3, 06... 
[+]

Entropy:

6.8116

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

262 KB (268,288 bytes)

Scan 006bc8fb_19a8_crypt_io_copy.tmp - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.