home

prismsound_uac2_.sys

Prism Media Products Limited

It runs as a Windows 64-bit kernel mode device driver named “Prism Sound UAC2 Service”.
Publisher:
Prism Media Products Limited  (signed and verified)

MD5:
dfc8e934c6755b51c60ed0ad41ccbcc5

SHA-1:
1c386e0b2d51dd7e781f420f16714cbac3501564

SHA-256:
d27cec8bf76122bfc4f0b946c3e1c5c8178d425aac02e3f5b1279d228fa7f9dc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:13:43 PM UTC  (today)

File size:
43.8 KB (44,848 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\prismsound_uac2_.sys

Digital Signature
Signed by:
Prism Media Products Limited

Authority:
GlobalSign nv-sa

Valid from:
7/4/2012 10:20:53 PM

Valid to:
8/24/2013 2:52:10 PM

Subject:
CN=Prism Media Products Limited, O=Prism Media Products Limited, L=Stretham, S=Cambridgeshire, C=GB

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121AA6B88F5DAA525C7AA14973C99DB96CD

File PE Metadata
Compilation timestamp:
8/7/2013 3:23:49 PM

OS version:
6.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
768:pzY8k2kKIZzjS4657LKthHiAlOZg4+b7kZA:y8k2kvzjQ5IhHicqD+EZA

Entry address:
0x44E0

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, BF, 8C, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, AE, FE, FF, FF, CC, CC, CC, CC, CC, CC, E9, 37, 00, 00, 00, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8B, 05, 71, 2A, 00, 00, 48, 85, C0, 74, 0E, 48, 8D, 15, E9, FF, FF, FF, 48, 3B, C2, 74, 02, FF, D0, 48, 83, C4, 28, E9, 09, 00, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 28, 48, 8D, 0D, 19, 1C, 00, 00, E8, 98, 00, 00, 00, 4C, 8B, 05, 3D...
 
[+]

Entropy:
6.3938

Code size:
30 KB (30,720 bytes)

Driver
Display name:
Prism Sound UAC2 Service

Service name:
PrismSound_UAC2_

Type:
Kernel device driver (KernelDriver)

Group:
Extended Base


Scan prismsound_uac2_.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.