home

2ecf56ea3bce574a9db06533b641fb3b5415cc4d

Encrypted Disk Detector

Magnet Forensics Inc.

It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
Magnet Forensics Inc.  (signed and verified)

Product:
Encrypted Disk Detector

Description:
Checks for currently mounted encrypted disks and volumes

Version:
2.01

MD5:
28fccfac5a8905758009096f2c4e20ff

SHA-1:
c71cd2785ef88d1e10a072887abfd61181e1328a

SHA-256:
1ad454c79457e9c9e00b6b6c6fb4d7357079c88d5e78bfde529c1cdf44a4e7bc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:44:12 PM UTC  (today)

File size:
90.9 KB (93,089 bytes)

Product version:
2.01

Copyright:
Copyright (c) 2009-2013 Magnet Forensics Inc.

Original file name:
EDD.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\mozilla\firefox\profiles\{user}.default\cache2\entries\2ecf56ea3bce574a9db06533b641fb3b5415cc4d

Digital Signature
Signed by:
Magnet Forensics Inc.

Authority:
GlobalSign nv-sa

Valid from:
8/31/2012 4:08:15 PM

Valid to:
9/1/2015 4:08:15 PM

Subject:
E=jad@magnetforensics.com, CN=Magnet Forensics Inc., O=Magnet Forensics Inc., L=Waterloo, S=Ontario, C=CA

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121196291CEA40E811694D0D164367A0E83

File PE Metadata
Compilation timestamp:
8/19/2015 6:14:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

Entry address:
0x14A4

Entry point:
68, 34, 17, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 78, 00, 00, 00, 38, 00, 00, 00, C3, EB, B5, 24, DE, 6D, 9F, 45, 85, 66, 83, 59, A1, 38, 30, 5C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 45, 44, 44, 00, 00, 00, 00, 00, 43, 68, 65, 63, 6B, 73, 20, 66, 6F, 72, 20, 63, 75, 72, 72, 65, 6E, 74, 6C, 79, 20, 6D, 6F, 75, 6E, 74, 65, 64, 20, 65, 6E, 63, 72, 79, 70, 74, 65, 64, 20, 64, 69, 73, 6B, 73, 20, 61, 6E, 64, 20, 76, 6F, 6C, 75, 6D, 65, 73, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
44 KB (45,056 bytes)

Scan 2ecf56ea3bce574a9db06533b641fb3b5415cc4d - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.