home

447423.dll

ISODrive

SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD.

Publisher:
EZB Systems, Inc.  (signed by SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD.)

Product:
ISODrive

Description:
ISO DVD/CD-ROM Device Driver

Version:
3.13 built by: WinDDK

MD5:
9f8b4884bafa7b96060fbc7c9c4fdf47

SHA-1:
53b531b26e3276f26c17a29b5f2a4bbd02ee74a5

SHA-256:
e417315a4be541eacbd7016fb7ddc164c3d6ffad7cdc82b1e137b7d42a0e6fdc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 12:28:30 PM UTC  (today)

File size:
193 KB (197,632 bytes)

Product version:
3.13

Copyright:
Copyright (c)2006-2009 EZB Systems, Inc.

Original file name:
ISODrive.sys

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\s-1-5-31-1286970278978-5713669491-166975984-320\rotinom\deleted\applications\x-dll\447423.dll

Digital Signature
Signed by:
SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD.

Authority:
GlobalSign nv-sa

Valid from:
1/30/2009 12:29:58 PM

Valid to:
1/30/2010 12:29:58 PM

Subject:
E=cert@ezbsystems.com, CN=SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD., O=SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD., C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011F27455749

File PE Metadata
Compilation timestamp:
2/10/2009 11:22:18 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
6144:y6+1x6th4wXaRQFm5CXg1wIf1EGKRFhBqPB:8xKdXaOFkig1mphIJ

Entry address:
0x1B2E0

Entry point:
48, 8B, 05, 71, BB, FF, FF, 49, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 85, C0, 74, 05, 49, 3B, C1, 75, 2F, 4C, 8D, 05, 56, BB, FF, FF, 48, B8, 20, 03, 00, 00, 80, F7, FF, FF, 48, 8B, 00, 49, 33, C0, 49, B8, FF, FF, FF, FF, FF, FF, 00, 00, 49, 23, C0, 49, 0F, 44, C1, 48, 89, 05, 2E, BB, FF, FF, 48, F7, D0, 48, 89, 05, 1C, BB, FF, FF, E9, 37, F8, FF, FF, CC, CC, CC, CC, CC, CC, CC, 49, 53, 4F, 44, 72, 69, 76, 65, 43, 72, 65, 61, 74, 65, 44, 65, 76, 69, 63, 65, 2D, 2D, 2E, 20, 53, 54, 41, 54, 55, 53, 20, 25...
 
[+]

Entropy:
6.5524

Code size:
77 KB (78,848 bytes)

Scan 447423.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.