home

avpcifilter.sys

Windows Win 7 DDK driver

Avatron Software, Inc

It runs as a Windows kernel mode device driver named “Avatron PCI Bus Device Filter”.
Publisher:
Windows (R) Win 7 DDK provider  (signed by Avatron Software, Inc)

Product:
Windows (R) Win 7 DDK driver

Description:
Avatron PCI Bus Device Filter

Version:
6.1.7600.16385 built by: WinDDK

MD5:
c0b629db40a6e3a3ff7e6e5270f80979

SHA-1:
cf271d74ac38e0d070a5ddd26f265e2e4d12849c

SHA-256:
09ec11918a05b11aa02ecd1d84d578e3dba1b5d95c31a4b8bf9519d7131571b2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 6:21:08 AM UTC  (today)

File size:
28.5 KB (29,176 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
AVPCIFilter.sys:

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\avpcifilter.sys

Digital Signature
Signed by:
Avatron Software, Inc

Authority:
GlobalSign nv-sa

Valid from:
6/7/2013 3:15:13 AM

Valid to:
9/2/2016 1:34:47 AM

Subject:
CN="Avatron Software, Inc", OU="Avatron Software, Inc", O="Avatron Software, Inc", L=Portland, S=OR, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A410DC32E5AFDB0C9BD53BE61FF7602B

File PE Metadata
Compilation timestamp:
10/16/2013 5:46:41 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
384:Z6v1opNgdbkgTmn9MahnXeB4FkfhHVvKu/tu66n2KtPLaPno65TdUb+Dan:Z6Gp+bkgTuvhXeiFydtu/2fPnn8iD2

Entry address:
0x70B2

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 44, FF, FF, FF, 44, 72, 69, 76, 65, 72, 20, 45, 6E, 74, 72, 79, 20, 44, 72, 69, 76, 65, 72, 20, 4F, 62, 6A, 65, 63, 74, 20, 28, 30, 78, 25, 70, 29, 0A, 00, CC, 41, 56, 50, 43, 49, 46, 69, 6C, 74, 65, 72, 2E, 73, 79, 73, 3A, 20, 00, 20, 71, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E4, 74, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 18, 72, 00, 00, 34, 72, 00, 00, 46, 72, 00, 00, 64, 72, 00, 00, 70, 72...
 
[+]

Entropy:
6.4575

Code size:
15.5 KB (15,872 bytes)

Driver
Display name:
Avatron PCI Bus Device Filter

Service name:
AVPCIFilter

Type:
Kernel device driver (KernelDriver)


Scan avpcifilter.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.