» 006bfff2_ee0_crypt_io_copy.tmp
Overview
Analysis
File Details

006bfff2_ee0_crypt_io_copy.tmp

DAEMON Tools

Duplex Secure Ltd

File name:

Publisher:

DT Soft Ltd. (signed by Duplex Secure Ltd)

Product:

DAEMON Tools

Description:

SCSI miniport

Version:

4.30.0.0 built by: WinDDK

MD5:

9cc51781c4681ba426f8e7ccb26987ec

SHA-1:

20fc843592bb4f81758e954f68c2ab156661e4b5

SHA-256:

d02ba035bf32df2d2ea0cd9e70df7883fd0eed3f336756115e15e094c2a17db3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/13/2025 1:11:51 AM UTC (today)

File size:

258 KB (264,176 bytes)

Product version:

4.30.0.0

Language:

Language Neutral

Common path:

C:\ProgramData\kaspersky lab\kes10\temp\crypt\006bfff2_ee0_crypt_io_copy.tmp

Digital Signature

Signed by:

Duplex Secure Ltd

Authority:

VeriSign, Inc.

Valid from:

6/27/2007 2:00:00 AM

Valid to:

8/23/2010 1:59:59 AM

Subject:

CN=Duplex Secure Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Duplex Secure Ltd, S=Nevis, C=KN

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3217B318D8B2B1501B3711EE65205704

File PE Metadata

Compilation timestamp:

12/3/2008 8:18:47 PM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

8.0

Entry address:

0x35844

Entry point:

E9, 9B, F9, FF, FF, CC, CC, CC, 68, 1E, 92, 90, B5, E8, 37, 38, 00, 00, D1, 10, 57, B3, 1D, 4F, BE, D4, 3D, A0, D6, 1B, 6F, AE, 03, 4D, 88, EB, 1E, 55, 76, AD, CE, 16, 7C, 53, 1A, 98, 9D, AC, 49, D9, 5C, 24, 7B, 3F, DF, 03, 24, 74, DD, 95, 29, 79, BD, 11, 52, 49, 45, 20, 29, F2, FF, FF, FF, EC, 23, C7, D4, 3A, 92, 01, 00, 00, 24, 2F, FD, A9, 68, 84, 21, 5B, 75, 96, 1F, 2C, 4C, F5, D0, F8, 42, 53, A6, B8, EB, 20, 38, 6F, A1, A9, 0B, 28, 5F, 94, AE, DD, CA, A6, EE, 86, DB, 4F, 13, 19, F8, 1E, 5B, 02, D6, 41... 
[+]

Entropy:

6.8286

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

264 KB (270,336 bytes)

Scan 006bfff2_ee0_crypt_io_copy.tmp - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.