» fileboxa64.sys
Overview
Analysis
File Details

fileboxa64.sys

IE Sandbox

EAZ SOLUTION, INC.

File name:

fileboxa64.sys

Publisher:

EAZ Solution,Inc (signed by EAZ SOLUTION, INC.)

Product:

IE Sandbox

Description:

FileBox

Version:

3,0,4,0 built by: WinDDK

MD5:

f82a4c3a4f0734bc28669df89ad6e614

SHA-1:

9c5648279cb173b89e2c2894833b6c7a46b16954

SHA-256:

487274a415f56acf003a51bbe0362d77ea47e2d37f21c1ffe2a1824f7c09b265

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:49:58 AM UTC (today)

File size:

99.4 KB (101,760 bytes)

Product version:

3,0,4,0

Original file name:

FileBox.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Program Files\ie sandbox\fileboxa64.sys

Digital Signature

Signed by:

EAZ SOLUTION, INC.

Authority:

VeriSign, Inc.

Valid from:

12/9/2009 12:00:00 AM

Valid to:

12/12/2011 11:59:59 PM

Subject:

CN="EAZ SOLUTION, INC.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="EAZ SOLUTION, INC.", L=Richardson, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6B267495B23F12E58FA9155398D8C1FA

File PE Metadata

Compilation timestamp:

6/2/2010 10:53:02 AM

OS version:

5.2

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

8.0

CTPH (ssdeep):

3072:BQBZe9DLoeuB+S8LjSKFEfhhx5Z/DnvDFElyVlFK8NMqqDL2/LFCl:BQBZe9DLhuB+SkjSKFEhDnvDFElyVlFa

Entry address:

0x3C40

Entry point:

B7, C8, 48, 03, 4C, 24, 20, 66, 8B, 01, 66, 89, 06, 8B, 41, 02, 89, 46, 02, 40, 80, FF, 02, 75, 06, 4C, 8D, 66, 06, EB, 0C, 40, 80, FF, 20, 74, 06, 40, 80, FF, 02, 75, 44, 33, D2, 41, 8B, C5, F7, F5, 8B, DA, 41, 03, 47, 48, 4C, 8D, 4C, 24, 20, 45, 32, C0, 8B, D0, 49, 8B, CE, E8, 22, FF, FF, FF, 0F, B7, C3, 66, 03, DB, 66, 03, C3, 66, 03, C0, 48, 0F, B7, C8, 48, 03, 4C, 24, 20, 66, 8B, 01, 66, 41, 89, 04, 24, 8B, 41, 02, 41, 89, 44, 24, 02, 33, C0, 48, 83, C4, 38, 41, 5F, 41, 5E, 41, 5D, 41, 5C, 5F, 5E, 5D... 
[+]

Entropy:

6.5528

Code size:

59.5 KB (60,928 bytes)

Scan fileboxa64.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.