home

IpmSecurityAgent1.sys

Security Agent

Lightspeed Systems, Inc.

It runs as a Windows kernel mode device driver named “Security Agent Filter Driver”.
Publisher:
Lightspeed Systems  (signed by Lightspeed Systems, Inc.)

Product:
Security Agent

Description:
TDI Filter Driver

Version:
8.02.00

MD5:
6746b8fd69f7d0907181208616e9cace

SHA-1:
3c5f0d5cab24ec1a09ec36bf82d4b6650fb1397b

SHA-256:
c5f3e5255c420c90d61b9b2921379b0f92d58651f4721b91bc4d80822030f258

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:20:54 AM UTC  (today)

File size:
39.6 KB (40,512 bytes)

Product version:
8.02.00

Copyright:
Copyright © 2011

Original file name:
IpmSecurityAgent1.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\ipmsecurityagent1.sys

Digital Signature
Signed by:
Lightspeed Systems, Inc.

Authority:
VeriSign, Inc.

Valid from:
9/7/2010 8:00:00 PM

Valid to:
9/28/2013 7:59:59 PM

Subject:
CN="Lightspeed Systems, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Lightspeed Systems, Inc.", L=Bakersfield, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
78610EB8A49E71BE56C28B38969CFE79

File PE Metadata
Compilation timestamp:
2/15/2013 1:01:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:cwleT3z6qKTB8gvR5KN6ZM9EUcxkAQ6gqA3KNBEJNAGEfwFoKaK1IbCzzmqP:cCezT9gv7Ycxux7zv8Cza2

Entry address:
0xA034

Entry point:
8B, FF, 55, 8B, EC, E8, C2, FF, FF, FF, 5D, E9, BC, BD, FF, FF, 8C, A0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 94, A4, 00, 00, 0C, 80, 00, 00, 80, A0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, CA, A4, 00, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B6, A4, 00, 00, A2, A4, 00, 00, 00, 00, 00, 00, 80, A1, 00, 00, 98, A1, 00, 00, AA, A1, 00, 00, BC, A1, 00, 00, D8, A1, 00, 00, F2, A1, 00, 00, 0A, A2, 00, 00, 1C, A2, 00, 00, 3A, A2, 00, 00, 5C, A2, 00, 00...
 
[+]

Entropy:
6.5118

Code size:
26 KB (26,624 bytes)

Driver
Display name:
Security Agent Filter Driver

Service name:
IpmSecurityAgent1

Description:
Allows the Security Agent to protect against unauthorized network access.

Type:
Kernel device driver (KernelDriver)

Group:
PNP_TDI

Depends on:
Tcpip


Scan IpmSecurityAgent1.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.