home

zam-shadow-copy-2e1fc4d9

Truesight

Adlice

Publisher:
Adlice Software  (signed by Adlice)

Product:
Truesight

Description:
Antirootkit module

Version:
1.0.4

MD5:
fd44fa80da03ea144153a76debbb61b4

SHA-1:
2cc9f1f9189bdffd1f5be4d419bd3633f6b23e1c

SHA-256:
0c46717f489a415a583470dae8cf58e47bc307b9cb0f9db6c4edf33b7525475c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:56:03 PM UTC  (today)

File size:
34.2 KB (35,064 bytes)

Product version:
1.0.4

Copyright:
Copyright Adlice Software(C) 2014

Original file name:
Truesight

Language:
French (France)

Common path:
C:\windows\temp\zam-shadow-copy-2e1fc4d9

Digital Signature
Signed by:
Adlice

Authority:
DigiCert Inc

Valid from:
6/17/2014 1:00:00 AM

Valid to:
6/22/2015 1:00:00 AM

Subject:
CN=Adlice, O=Adlice, L=Orvault, S=Loire Atlantique, C=FR

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0DA5BE52AD798CF036B2B2322FF0F774

File PE Metadata
Compilation timestamp:
12/4/2014 12:36:26 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:ZA+Xggi01VwLi1nGgmkzQarR7RHmjiXAmHO1Kga:7zi01VwLi1nGgBQarfxwmu1I

Entry address:
0x5756

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, AA, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 54, 72, 75, 65, 53, 69, 67, 68, 74, 20, 56, 25, 73, 0A, 00, CC, 31, 2E, 30, 2E, 34, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 5C, 00, 44, 00, 6F, 00, 73, 00, 44, 00, 65, 00, 76, 00, 69, 00, 63, 00, 65, 00, 73, 00, 5C, 00, 54, 00, 72, 00, 75, 00, 65, 00, 53, 00, 69, 00, 67, 00, 68, 00, 74, 00, 00, 00, CC, CC, CC, CC, 5C, 00, 44, 00, 65, 00, 76, 00, 69, 00, 63, 00, 65, 00, 5C, 00, 54, 00, 72, 00, 75, 00...
 
[+]

Code size:
21 KB (21,504 bytes)

Scan zam-shadow-copy-2e1fc4d9 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.