home

s6000knt.sys

Windows Win 7 DDK driver

AlcorMicro, Corp.

It runs as a Windows 64-bit kernel mode device driver named “S6000KNT_WebCam Driver”.
Publisher:
Windows (R) Win 7 DDK provider  (signed by AlcorMicro, Corp.)

Product:
Windows (R) Win 7 DDK driver

Description:
AVStream Simulated Hardware Sample

Version:
6.1.6801.0 built by: WinDDK

MD5:
5f18dd26341a4849b8e1cf4a25333f67

SHA-1:
67be07d78552c7361678f630a956f29f5f62fd98

SHA-256:
439d2adaf279e16d0a28feb92ebb414430b1852653fb3e4c560fff682784d110

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:07:56 AM UTC  (today)

File size:
3.1 MB (3,293,272 bytes)

Product version:
6.1.6801.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
avshws.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\s6000knt.sys

Digital Signature
Signed by:
AlcorMicro, Corp.

Authority:
VeriSign, Inc.

Valid from:
7/29/2010 5:00:00 PM

Valid to:
9/23/2012 4:59:59 PM

Subject:
CN="AlcorMicro, Corp.", OU=Marketing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AlcorMicro, Corp.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A33646248348AD3243A79F786DB8F64

File PE Metadata
Compilation timestamp:
9/12/2010 8:18:58 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
6144:9KhlFf35wTTmlPgd/GalZfYtS2e3PdOO6mgC7fQ+L:9KwTTGId/GalZV34O6mgCBL

Entry address:
0x31F7E4

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 96, 0E, CE, FF, CC, CC, 00, F9, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 66, FE, 31, 00, A8, 21, 02, 00, 70, F8, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 20, 00, 32, 00, 18, 21, 02, 00, 58, F8, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 72, 00, 32, 00, 00, 21, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 28, 00, 32, 00, 00, 00, 00, 00, 4E, 00, 32, 00...
 
[+]

Entropy:
0.5785

Code size:
137.9 KB (141,184 bytes)

Driver
Display name:
S6000KNT_WebCam Driver

Service name:
S6000KNT

Type:
Kernel device driver (KernelDriver)


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.