» removedrv.exe
Overview
Analysis
File Details

removedrv.exe

Kvaser AB

File name:

removedrv.exe

Publisher:

Kvaser AB (signed and verified)

MD5:

41201f35fef3f0dbbd5c0c6f30ba6c24

SHA-1:

a21253bea5377a800caa1cd00bf45d04198074b2

SHA-256:

0a40a53850ab44bbc6af3b70294542d377a3af57636c68af81a4141f2987dfdd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 11:19:00 AM UTC (today)

File size:

49.1 KB (50,256 bytes)

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\kvaser\drivers\removedrv.exe

Digital Signature

Signed by:

Kvaser AB

Authority:

VeriSign, Inc.

Valid from:

6/22/2010 7:00:00 PM

Valid to:

7/9/2013 6:59:59 PM

Subject:

CN=Kvaser AB, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Kvaser AB, L=Molndal, S=Molndal, C=SE

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

00BB234703EC1705D125D2C08166FD8D

File PE Metadata

Compilation timestamp:

4/29/2011 6:45:51 AM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

8.0

Entry address:

0x1840

Entry point:

53, 57, 48, 83, EC, 38, FF, 15, 3C, 68, 00, 00, 48, 8B, C8, BF, 94, 00, 00, 00, 4C, 8B, C7, 33, D2, FF, 15, 21, 68, 00, 00, 48, 8B, D8, 48, 85, DB, 75, 0A, B8, FF, 00, 00, 00, E9, 81, 01, 00, 00, 89, 3B, 48, 8B, CB, FF, 15, FC, 67, 00, 00, 85, C0, 75, 1E, FF, 15, 02, 68, 00, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, DC, 67, 00, 00, B8, FF, 00, 00, 00, E9, 54, 01, 00, 00, 8B, 43, 10, 89, 05, C5, A8, 00, 00, 8B, 43, 04, 89, 05, C8, A8, 00, 00, 8B, 43, 08, 89, 05, C3, A8, 00, 00, 8B, 43, 0C, 25, FF, 7F, 00... 
[+]

Entropy:

5.9895

Code size:

26 KB (26,624 bytes)

Scan removedrv.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.