» etusbfilter.sys
Overview
Analysis
File Details

etusbfilter.sys

Lenovo.Ltd

File name:

etusbfilter.sys

Publisher:

Lenovo.Ltd (signed and verified)

Version:

1, 0, 0, 11

MD5:

e1e393b27efd418ab4ea11bece9a44ff

SHA-1:

529c1eb805ee9221784d5c51ff7b85bd7c6f9a36

SHA-256:

1dc5861310c33404bced4aacf8938396aa60f0d5c649f2490670deea148419e9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 12:03:58 PM UTC (today)

File size:

33.2 KB (33,992 bytes)

Product version:

1, 0, 0, 0

File type:

Driver (Win64 SYS)

Common path:

C:\Windows\System32\drivers\etusbfilter.sys

Digital Signature

Signed by:

Lenovo.Ltd

Authority:

VeriSign, Inc.

Valid from:

7/12/2014 8:00:00 AM

Valid to:

1/16/2015 7:59:59 AM

Subject:

CN=Lenovo.Ltd, O=Lenovo.Ltd, L=Beijing, S=Beijing, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4BF0ED60C39506CEB8FE1BB657C28136

File PE Metadata

Compilation timestamp:

9/2/2014 9:28:05 AM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

Entry address:

0x9350

Entry point:

48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 9A, FC, FF, FF, CC, CC, 08, 94, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, CC, 98, 00, 00, 58, 30, 00, 00, B0, 93, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C8, 99, 00, 00, 00, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, 99, 00, 00, 00, 00, 00, 00, 8C, 99, 00, 00, 00, 00, 00, 00, 78, 99, 00, 00, 00, 00, 00, 00, 64, 99, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.2314

Code size:

17 KB (17,408 bytes)

Scan etusbfilter.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.