» mdf16.Sys
Overview
Analysis
File Details
Behaviors (1)

mdf16.Sys

Filter Driver for SecretZone

Samsung Electronics Co., Ltd.

It runs as a Windows 64-bit kernel mode device driver named “mdf16”.

File name:

mdf16.Sys

Publisher:

Samsung Electronics Co., Ltd. (signed and verified)

Product:

Filter Driver for SecretZone

Description:

Driver for SecretZone

Version:

1.6.0.0 2010.07.30 built by: WinDDK

MD5:

575fefb813df2c1fcb367267c51330ed

SHA-1:

baa5e0d53e0d9b46221958154c3d19ad434f49d9

SHA-256:

7e0fa614118081206c8e618bfe47fee1e9de750d8742429b537b4201f2372ffc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 11:15:13 PM UTC (a few moments ago)

File size:

21.8 KB (22,336 bytes)

Product version:

1.6.0.0 2010.07.30

Original file name:

mdf16.Sys

File type:

Driver (Win64 SYS)

Language:

English (United States)

Common path:

C:\Program Files\clarus\samsung drive manager\mdf16.sys

Digital Signature

Signed by:

Samsung Electronics Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

3/21/2011 1:00:00 AM

Valid to:

6/20/2012 1:59:59 AM

Subject:

CN="Samsung Electronics Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics Co., Ltd.", L=Suwon-Si, S=Gyeonggi-Do, C=KR

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

773008CC9EA164B03D86F597576EB6B7

File PE Metadata

OS bitness:

Win64

CTPH (ssdeep):

384:1zchZcreUodIJq4NV+4U8o+AMaY2xUYZYJLca6j1speMgZ:RHr8exNsJl0LFmT

Driver

Display name:

mdf16

Type:

Kernel device driver (KernelDriver)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.