home

rtc.sys

WDM Book

HongFuTai Precision Electrons (YanTai) Co. Ltd

Publisher:
PHD Computer Consultants Ltd  (signed by HongFuTai Precision Electrons (YanTai) Co. Ltd)

Product:
WDM Book

Description:
Wdm1

Version:
1, 2, 0, 0

MD5:
5360d764789c7c20d8056c3c1627ac5e

SHA-1:
ae3d39a9299a592e9e5c8048ef5e75b36674dfe6

SHA-256:
c122f1e80bb653a37916cd8bd416580d192e9fd3cf689c4b8975214493fb883d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:58:11 PM UTC  (today)

File size:
15.1 KB (15,448 bytes)

Product version:
1.7.5.0

Copyright:
Copyright © 1998,1999 PHD Computer Consultants Ltd

Original file name:
Wdm1.sys

File type:
Driver (Win64 SYS)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\testdisk-7.0.win\testdisk-7.0\new folder\Windows\System32\drivers\rtc.sys

Digital Signature
Signed by:
HongFuTai Precision Electrons (YanTai) Co. Ltd

Authority:
GlobalSign nv-sa

Valid from:
10/26/2006 3:23:47 AM

Valid to:
10/26/2009 3:23:47 AM

Subject:
E=Heckle.gj.wang@foxconn.com, CN=HongFuTai Precision Electrons (YanTai) Co. Ltd, O=HongFuTai Precision Electrons (YanTai) Co. Ltd, C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000010E83EEAFBA

File PE Metadata
Compilation timestamp:
12/12/2007 8:27:02 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
192:xaz85hWqRCdW2ShgRembl2yowzFoVEEL/aoxhHoe068jSJUbueqc:L5XD2Si4mwYzuWELFHJ06dUb+c

Entry address:
0x18B0

Entry point:
48, 8B, 05, D9, FA, FF, FF, 49, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 85, C0, 74, 05, 49, 3B, C1, 75, 2F, 4C, 8D, 05, BE, FA, FF, FF, 48, B8, 20, 03, 00, 00, 80, F7, FF, FF, 48, 8B, 00, 49, 33, C0, 49, B8, FF, FF, FF, FF, FF, FF, 00, 00, 49, 23, C0, 49, 0F, 44, C1, 48, 89, 05, 96, FA, FF, FF, 48, F7, D0, 48, 89, 05, 84, FA, FF, FF, E9, 07, FF, FF, FF, CC, CC, CC, CC, CC, CC, CC, 52, 65, 67, 69, 73, 74, 72, 79, 50, 61, 74, 68, 20, 69, 73, 20, 25, 54, 00, CC, 70, 19, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6915

Code size:
4.8 KB (4,864 bytes)

Scan rtc.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.