home

eslwireacd.sys

EslWireACD

Turtle Entertainment GmbH

It runs as a Windows kernel mode device driver named “ESLWireAC”.
Publisher:
<Turtle Entertainment>  (signed by Turtle Entertainment GmbH)

Product:
EslWireACD

Version:
1.0.0.5572

MD5:
e43b22e33c64915b6179ebab8c642c19

SHA-1:
9c09cc2bc5d7ad09cb7918c110453e71245ab4e5

SHA-256:
01881f0ffe41d2cb2735167a1b11ddc9ae5ec5683937858786bc23ed1a3e1fe4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:57:40 AM UTC  (today)

File size:
692.9 KB (709,512 bytes)

Product version:
1.0

Copyright:
Copyright © 2010

Original file name:
EslWireACD

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\eslwireacd.sys

Digital Signature
Signed by:
Turtle Entertainment GmbH

Authority:
GlobalSign nv-sa

Valid from:
9/29/2011 6:19:37 PM

Valid to:
12/27/2014 11:17:59 AM

Subject:
CN=Turtle Entertainment GmbH, OU=Desktop Software Development, O=Turtle Entertainment GmbH, L=Cologne, S=NRW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11211D81E9C09273DF1A6E9A05931416F400

File PE Metadata
Compilation timestamp:
10/16/2014 4:41:52 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
12288:C/nqZyJNrCjzHXgbhTON5JDb4QLkYcTH7lw38/awd5unfc8:OqZQNrCzHXgbhiPJDYt7o8/aw+08

Entry address:
0x4023E

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 84, 06, FC, FF, CC, CC, A0, 02, 04, 00, 00, 00, 00, 00, 00, 00, 00, 00, 74, 07, 04, 00, 94, 04, 00, 00, 8C, 02, 04, 00, 00, 00, 00, 00, 00, 00, 00, 00, CA, 07, 04, 00, 80, 04, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, A8, 07, 04, 00, 90, 07, 04, 00, 82, 07, 04, 00, BC, 07, 04, 00, 00, 00, 00, 00, E0, 03, 04, 00, F8, 03, 04, 00, 02, 04, 04, 00, 14, 04, 04, 00, 2C, 04, 04, 00, 44, 04, 04, 00, 56, 04, 04, 00, 72, 04...
 
[+]

Code size:
23.5 KB (24,064 bytes)

Driver
Display name:
ESLWireAC

Type:
Kernel device driver (KernelDriver)


Scan eslwireacd.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.