home

libusb0.sys

LibUSB-Win32 - Kernel Driver

Media Numerics GmbH

It runs as a Windows kernel mode device driver named “LibUsb-Win32 - Kernel Driver 09/03/2009, 0.1.12.1”.
Publisher:
http://libusb-win32.sourceforge.net  (signed by Media Numerics GmbH)

Product:
LibUSB-Win32 - Kernel Driver

Version:
0.1.12.1

MD5:
ae78b64f519de74f99fdaa963e31f103

SHA-1:
293ae8ec682bbb131bd65f5f16371bb0ef05ff50

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 9:57:43 PM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Android.Trojan.GingerMaster.T
8.14.04.27.03

File size:
34.6 KB (35,400 bytes)

Product version:
0.1.12.1

Copyright:
@ 2002-2005 S. Meyer, <ste_meyer@web.de>

Original file name:
libusb0.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\libusb0.sys

Digital Signature
Signed by:
Media Numerics GmbH

Authority:
VeriSign, Inc.

Valid from:
8/31/2009 2:00:00 AM

Valid to:
9/1/2010 1:59:59 AM

Subject:
CN=Media Numerics GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Media Numerics GmbH, L=Hanau, S=Hessen, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3596DA8E8C516ED5CE5CFA8370B90B00

File PE Metadata
Compilation timestamp:
3/20/2007 11:33:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
384:oHrxQ3qrYFp1LRy8kMh1KDPPG/IGfeUaTaRJ/OlxAk9veYJLaFbCb1M6jXb:oHK3qsHNyVMh4Pe/moenLcbCJMmL

Entry address:
0x2150

Entry point:
55, 89, E5, 53, 83, EC, 04, 8B, 5D, 08, C7, 04, 24, F0, 6A, 64, 68, E8, 3A, 26, 00, 00, B8, 02, 00, 00, 00, A3, 00, 50, 64, 68, 31, C0, 8D, B4, 26, 00, 00, 00, 00, 8D, BC, 27, 00, 00, 00, 00, B9, F0, 12, 64, 68, 89, 4C, 83, 38, 40, 83, F8, 1B, 7E, F1, C7, 43, 34, E0, 21, 64, 68, 8B, 43, 18, C7, 40, 04, 70, 22, 64, 68, 31, C0, 5A, 5B, 5D, C2, 08, 00, 90, 8D, B4, 26, 00, 00, 00, 00, 55, B9, 00, 21, 00, 00, 89, E5, 83, EC, 18, 31, D2, 8B, 45, 08, 89, 4C, 24, 08, 89, 54, 24, 04, 83, C0, 44, 89, 04, 24, E8, 9D...
 
[+]

Code size:
15 KB (15,360 bytes)

Driver
Display name:
LibUsb-Win32 - Kernel Driver 09/03/2009, 0.1.12.1

Service name:
libusb0

Type:
Kernel device driver (KernelDriver)


Scan libusb0.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.