home

NTSTPL1.SYS

Sagemcom Broadband Software Family

Sagem Communications SAS

Publisher:
Sagemcom SAS  (signed by Sagem Communications SAS)

Product:
Sagemcom Broadband Software Family

Description:
Sagemcom TPL Enum Driver

Version:
1.00.20.00 built by: WinDDK

MD5:
e8a0fb3cffd3a653e059abe7017bb988

SHA-1:
134ce86e17aee20de499509586ef4cc16ab85a71

SHA-256:
333b55b96dfafda6476552a512ef0a48d5baf15f1defe006909dd0955b272d1b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 8:49:28 PM UTC  (today)

File size:
15.1 KB (15,464 bytes)

Product version:
1.00.20.00

Copyright:
© 2009 Sagemcom SAS. All rights reserved.

Original file name:
NTSTPL1.SYS

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\supportplus\app64\ntstpl1.sys

Digital Signature
Signed by:
Sagem Communications SAS

Authority:
VeriSign, Inc.

Valid from:
12/4/2009 2:00:00 AM

Valid to:
12/5/2010 1:59:59 AM

Subject:
CN=Sagem Communications SAS, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sagem Communications SAS, L=Rueil Malmaison cedex, S=Hauts-de-Seine, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
50584DB2E9306896E37386CB8667AE51

File PE Metadata
Compilation timestamp:
6/3/2010 6:43:11 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

Entry address:
0x5064

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 6E, C4, FF, FF, CC, CC, B0, 50, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, CE, 51, 00, 00, 00, 20, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 10, 51, 00, 00, 00, 00, 00, 00, 1E, 51, 00, 00, 00, 00, 00, 00, 36, 51, 00, 00, 00, 00, 00, 00, 52, 51, 00, 00, 00, 00, 00, 00, 64, 51, 00, 00, 00, 00, 00, 00, 6E, 51, 00, 00, 00, 00, 00, 00, 7A, 51, 00, 00...
 
[+]

Entropy:
6.0122

Code size:
3.5 KB (3,584 bytes)

Scan NTSTPL1.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.