home

libusb0_ia64.sys

LibUSB-Win32 - Kernel Driver

EATON POWER QUALITY SAS

Publisher:
http://libusb-win32.sourceforge.net  (signed by EATON POWER QUALITY SAS)

Product:
LibUSB-Win32 - Kernel Driver

Version:
1.2.3.0

MD5:
bbd332c3168c7a94bf08d2a219030cdd

SHA-1:
69be90a18098eb5d85151e0e65684318bd848a9a

SHA-256:
269549b38d878f469593bdb5cd86665f57c8182179e2bf9b24c684b0e49a1e06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:10:56 PM UTC  (today)

File size:
87.9 KB (90,016 bytes)

Product version:
1.2.3.0

Copyright:
2002-2009 S. Meyer; 2010 T. Robinson

Original file name:
libusb0.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\bin\libusb0_ia64.sys

Digital Signature
Signed by:
EATON POWER QUALITY SAS

Authority:
GlobalSign nv-sa

Valid from:
10/8/2010 6:46:53 AM

Valid to:
12/13/2012 8:58:26 AM

Subject:
CN=EATON POWER QUALITY SAS, O=EATON POWER QUALITY SAS, L=MONTBONNOT SAINT MARTIN, C=FR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012B8B88ADE4

File PE Metadata
Compilation timestamp:
3/17/2011 1:11:22 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
1536:hd4XtrR59hFvQeg/mfWpa1og6vvRQpar4Km1YGWdAOID6mf9Gah5Sx11C+4iQouH:hdHgkOpym1umOUf4ah5Sjg

Entry address:
0x14020

Entry point:
00, C0, 02, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 40, D7, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 20, D1, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 80, BA, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 20, A6, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 80, A4, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 80, A2, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00, 20, 89, 01, 00, 00, 00, 00, 00, 00, 80, 22, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.5704

Code size:
70.5 KB (72,192 bytes)

Scan libusb0_ia64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.