» tmp00001f6baa921a071ec089db
Overview
Analysis
File Details

tmp00001f6baa921a071ec089db

SpeedFan

SOKNO S.R.L.

File name:

Publisher:

Almico Software (signed by SOKNO S.R.L.)

Product:

SpeedFan

Description:

SpeedFan x32 Driver

Version:

X2.03.11

MD5:

6a1bc1c18461a70f63379730afd304ee

SHA-1:

27ef906a24f6b088772ca51a15b1e2292b98ebfd

SHA-256:

b385539084020c96cb3a254e38f32f7a0178f5ec38f61df60ebce46a93bc19b5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 11:32:23 AM UTC (today)

File size:

512 KB (524,288 bytes)

Product version:

X2.03.11

Original file name:

sfdrvx32.sys

Language:

Language Neutral

Common path:

C:\windows\temp\tmp00001f6baa921a071ec089db

Digital Signature

Signed by:

SOKNO S.R.L.

Authority:

GlobalSign nv-sa

Valid from:

1/23/2012 6:31:42 AM

Valid to:

1/23/2013 6:31:42 AM

Subject:

CN=SOKNO S.R.L., OU=Software development, O=SOKNO S.R.L., L=Ancona, S=AN, C=IT

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112195D7AA105E2FFC7B0E33F36DA1636E74

File PE Metadata

Compilation timestamp:

12/29/2012 3:59:33 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

8.0

CTPH (ssdeep):

6144:a9YqFdDviuUAbIwe2seeGzpwGHB+AHqi3G8E13vF72HSwp195NHxx7cGrwzSnLpj:yYqF9Bb9pwGHi2HS+NHxNkzVf1

Entry address:

0x380E

Entry point:

8B, FF, 55, 8B, EC, A1, 80, 2D, 01, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1A, A1, 64, 2C, 01, 00, 8B, 00, 35, 80, 2D, 01, 00, A3, 80, 2D, 01, 00, 75, 07, 8B, C1, A3, 80, 2D, 01, 00, F7, D0, A3, 84, 2D, 01, 00, 5D, E9, BA, FE, FF, FF, 53, 70, 65, 65, 64, 46, 61, 6E, 20, 25, 73, 20, 20, 42, 75, 69, 6C, 74, 20, 44, 65, 63, 20, 32, 39, 20, 32, 30, 31, 32, 20, 32, 31, 3A, 35, 39, 3A, 33, 32, 20, 20, 44, 65, 62, 75, 67, 20, 25, 30, 38, 58, 20, 20, 42, 72, 65, 61, 6B, 20, 25, 30, 38, 58, 20, 20, 53... 
[+]

Entropy:

5.7274

Code size:

13.4 KB (13,696 bytes)

Scan tmp00001f6baa921a071ec089db - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.