PECKP_x64.sys
POWERENTER
Client Server International. Inc. Beijing Branch
It runs as a Windows 64-bit kernel mode device driver named “PECKbdProtector”.
Publisher:
CSII (signed by Client Server International. Inc. Beijing Branch)
Description:
PowerEnter Keyboard Protector
MD5:
f9b1453f6c14f3ad2429e290db75a5c0
SHA-1:
1e32d0b15f65deab0db0ca15f2aea64bc4bef06f
SHA-256:
223564ebe4f7b485957c7271b98ba9fc97411b67a255555f985956b8b7991dc2
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Analysis date:
4/25/2024 4:30:31 PM UTC (today)
File size:
37.1 KB (38,024 bytes)
Product version:
1, 3, 1, 20
Copyright:
Copyright (C) 2010-2011 CSII
Original file name:
PECKP_x64.sys
File type:
Driver (Win64 SYS)
Common path:
C:\Windows\System32\drivers\peckp_x64.sys
Valid from:
4/22/2010 8:00:00 AM
Valid to:
4/22/2012 7:59:59 AM
Subject:
CN=Client Server International. Inc. Beijing Branch, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Client Server International. Inc. Beijing Branch, L=Beijing, S=Beijing, C=CN
Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
48A08CB3544EC389CC26F4EF590F8B10
CTPH (ssdeep):
768:Zm9U7hpxso27Cf30YVs2MPbXNtpXmrILWMmebChDl:Zm9e67Co1bXPxSIaD+Cpl
Driver
Display name:
PECKbdProtector
Type:
Kernel device driver (KernelDriver)