home

udd97ff.tmp

BeeThink Network Blocker Driver

BeeThink Software Research and Development Center

It runs as a Windows 64-bit kernel mode device driver named “BeeThink NBlocker Filter”.
Publisher:
BeeThink SoftWare, Inc.  (signed by BeeThink Software Research and Development Center)

Product:
BeeThink Network Blocker Driver

Version:
1, 0, 0, 3

MD5:
6a998bc2999436cbc216f4bf8a49c02b

SHA-1:
710016788340b8845867a6fbaef383face7ee82c

SHA-256:
f093e52ff62346707ac6d7254455d9ac0b63c541312e4ded23d645dfa1e36cde

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/8/2024 1:47:45 PM UTC  (today)

File size:
40.7 KB (41,704 bytes)

Product version:
1, 0, 0, 3

Copyright:
Copyright (C) 2007-2013. BeeThink SoftWare, Inc. All rights reserved.

Trademarks:
BeeThink IP Blocker is registered trademarks of BeeThink SoftWare, Inc.

Original file name:
NBLOCKER.SYS

Language:
English (United States)

Common path:
C:\windows\temp\udd97ff.tmp

Digital Signature
Signed by:
BeeThink Software Research and Development Center

Authority:
Thawte, Inc.

Valid from:
8/17/2014 8:00:00 PM

Valid to:
8/17/2016 7:59:59 PM

Subject:
CN=BeeThink Software Research and Development Center, OU=IT, O=BeeThink Software Research and Development Center, L=Xi'an, S=Shanxi, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
167EAE8B86CE85E0E7E72FA1A0C288E1

File PE Metadata
Compilation timestamp:
3/3/2016 9:02:53 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:3qIYLD8sMMAoe/SlHVNXNmpzLS5Pqfdwu8YxSitInUGB82Lueg:HMAoXPqq5QH8eSkmB82yf

Entry address:
0xB29C

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, CC, 4E, 00, 42, 00, 6C, 00, 6F, 00, 63, 00, 6B, 00, 65, 00, 72, 00, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 42, 00, 65, 00, 65, 00, 54, 00, 68, 00, 69, 00, 6E, 00, 6B, 00, 20, 00, 4E, 00, 65, 00, 74, 00, 77, 00, 6F, 00, 72, 00, 6B, 00, 20, 00, 42, 00, 6C, 00, 6F, 00, 63, 00, 6B, 00, 65, 00, 72, 00, 20, 00, 44, 00, 72, 00, 69, 00, 76, 00, 65, 00...
 
[+]

Entropy:
6.4903

Code size:
27.5 KB (28,160 bytes)

Driver
Display name:
BeeThink NBlocker Filter

Service name:
NBlocker

Description:
@oem38.inf,%NBlocker_Desc%;BeeThink NBlocker Filter

Type:
Kernel device driver (KernelDriver)

Group:
NDIS


Scan udd97ff.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.