home

SECDRV.SYS

Security Windows NT

成都海宇通电气自动化工程有限公司

Publisher:
Macrovision Europe Ltd  (signed by 成都海宇通电气自动化工程有限公司)

Product:
Security Windows NT

Description:
Macrovision SECURITY Driver

Version:
3.18.000

MD5:
09dc8f430d7cf22def0a6e78ea3c0c32

SHA-1:
2d46c288cb8e60b272c79d72aee4ba7680043bcc

SHA-256:
35f383803b9cb355e0bac6c5f5b8def9a7326e94cfe998ff0d5ad3c3d7264db8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:53:44 PM UTC  (today)

File size:
15.7 KB (16,048 bytes)

Product version:
3.18.000 Windows NT 2002/11/14

Copyright:
Copyright (c) 1998-2002 Macrovision Corp.

Original file name:
SECDRV.SYS

File type:
Driver (Win32 SYS)

Common path:
C:\Program Files\太格立志傳5\secdrv.sys

Digital Signature
Signed by:
成都海宇通电气自动化工程有限公司

Authority:
WoSign eCommerce Services Limited

Valid from:
2/21/2012 11:30:54 AM

Valid to:
2/21/2013 5:48:34 PM

Subject:
E=liwenming@169x.cn, CN=成都海宇通电气自动化工程有限公司, O=成都海宇通电气自动化工程有限公司, L=都江堰市, S=四川省, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
18A1A0B0F0B093

File PE Metadata
Compilation timestamp:
11/14/2002 7:52:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
5.10

CTPH (ssdeep):
384:kRmRAXETwO/AyxL1zaUdzUaLPa71XoJczVZ3wFQ1bAwJg:fT3AyzaozbLPgNoJ+pwFQpJg

Entry address:
0x23A0

Entry point:
55, 8B, EC, 83, EC, 14, 56, E8, C2, E0, FF, FF, 85, C0, 75, 3D, 8B, 75, 08, 8D, 45, EC, 50, 89, 75, EC, C7, 45, F0, 54, 06, 01, 00, C7, 45, F4, A8, 06, 01, 00, C7, 45, F8, 4A, 1E, 01, 00, C7, 45, FC, 72, 1E, 01, 00, E8, 39, ED, FF, FF, 66, 85, C0, 75, 07, B8, 01, 00, 00, C0, EB, 06, 56, E8, 6F, DF, FF, FF, 5E, C9, C2, 08, 00, CC, CC, 1C, 24, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3C, 25, 00, 00, 80, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 25, 00, 00...
 
[+]

Entropy:
6.1270

Developed / compiled with:
Microsoft Visual C++

Code size:
7.3 KB (7,520 bytes)

Scan SECDRV.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.