home

IPFilter.sys

SANGFOR TECHNOLOGIES CO,. LTD

Publisher:
SANGFOR TECHNOLOGIES CO,. LTD  (signed and verified)

Description:
IPFilter support vista

Version:
2, 1, 0, 6

MD5:
d3ecd7d19154066bbbf5b86f4f29633d

SHA-1:
18208a38a3e046a3f4531a0dc46e74b252341b2e

SHA-256:
7047533c978eac6f4789ce6556c18916bed21ec4925d341cdfc4c42d5bac1f57

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:35:57 PM UTC  (today)

File size:
110 KB (112,688 bytes)

Product version:
2, 1, 0, 6

Copyright:
VPN driver

Original file name:
IPFilter.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Program Files\sangfor\ng pdlan\driver\ipfilter.sys

Digital Signature
Signed by:
SANGFOR TECHNOLOGIES CO,. LTD

Authority:
WoSign eCommerce Services Limited

Valid from:
8/29/2011 2:51:33 PM

Valid to:
9/1/2014 5:22:00 AM

Subject:
E=its@sangfor.com, CN="SANGFOR TECHNOLOGIES CO,. LTD", O="SANGFOR TECHNOLOGIES CO,. LTD", L=Shenzhen, S=Guangdong, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
08D79DB9B87CBA

File PE Metadata
Compilation timestamp:
5/30/2007 1:04:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
6.0

CTPH (ssdeep):
1536:5lU/E2LeDaSA0aSJaAguzufhLYIkxDpL4KaFlpg55qo35A:55aD09dzufhLmxpL4drpBwe

Entry address:
0x11761

Entry point:
55, 8B, EC, 81, EC, A8, 00, 00, 00, 53, 56, 68, A8, B0, 01, 00, E8, 28, 1E, FF, FF, 33, DB, 8B, 35, E4, 03, 01, 00, 53, 68, 68, 3D, 01, 00, 53, 89, 45, FC, 53, 53, 8D, 45, A0, 53, 50, FF, D6, 3B, C3, 89, 45, FC, 0F, 85, D8, 01, 00, 00, 57, 53, FF, 75, 0C, 8D, 45, F8, FF, 75, 08, 50, FF, 15, 60, 03, 01, 00, 8B, 0D, A8, B0, 01, 00, 8B, 45, F8, 6A, 12, 8D, BD, 58, FF, FF, FF, 89, 41, 08, 59, 33, C0, F3, AB, 8D, 45, F4, C6, 85, 58, FF, FF, FF, 04, 50, 8D, 85, 58, FF, FF, FF, 6A, 48, 50, FF, 75, F8, 88, 9D, 59...
 
[+]

Entropy:
5.3399

Developed / compiled with:
Microsoft Visual C++

Code size:
46.7 KB (47,776 bytes)

Scan IPFilter.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.