home

backup-20090112-065626-453.dll

Touchstone Software

Publisher:
Touchstone Software Corp  (signed by Touchstone Software)

Description:
Driver Agent

Version:
2.2007.9.6

MD5:
9b9d1969141d430c0ed51ee601cccdbb

SHA-1:
695641442e4fea89fc90e0e46dfaae73c5d374dd

SHA-256:
8da9185d49f45b4427caf34a0d4016c2adbd9ef1685eabc5ba110890ad1f7d49

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 5:03:25 AM UTC  (today)

Scan engine
Detection
Engine version

Prevx
Malicious Software
3.0.6

File size:
441.5 KB (452,056 bytes)

Product version:
1.0.0.0

Copyright:
(c) 2006, Touchstone Software Corp.

Original file name:
driveragent

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\backup-20090112-065626-453.dll

Digital Signature
Signed by:
Touchstone Software

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
4/29/2006 6:00:00 PM

Valid to:
4/29/2008 5:59:59 PM

Subject:
CN=Touchstone Software, OU=Secure Application Development, O=Touchstone Software, L=North Andover, S=Massachusetts, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4AFC41AF625FF810328A49076683F162

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:d404Z3H3MJmy1w4KUorD6IzfqZlyRBUGUWtQQbczN1vfzYi9IVwEe1FO8cvv1WmF:d404SJmyZovJzfq/ygVVHzYL7e188/Y

Entry address:
0x58050

Entry point:
55, 8B, EC, 83, C4, B4, B8, 48, 7E, 45, 00, E8, 1C, D9, FA, FF, E8, 13, FC, FF, FF, E8, AA, B8, FA, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6839

Developed / compiled with:
Microsoft Visual C++

Code size:
348.5 KB (356,864 bytes)

Scan backup-20090112-065626-453.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.