home

sdbus.sys

MD5:
688760ca2d3038d61046b3332bbef28e

SHA-1:
031134839e04b80a2a76628ecd6af6daa998bc2b

SHA-256:
98b9f098076eea3935933b53752af5deda3a1c23f4c63b84414d456673977b36

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 12:34:41 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.30.172

File size:
188.7 KB (193,264 bytes)

File type:
Driver (Win64 SYS)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:PC81PF+KXqSQXaw+i0eGfp9lOpiqge58KrZlhqd2N2h7GQvq:Pr1pjmp0ekppqjr/hqXhrS

Entry point:
AB, 05, 22, 5F, 16, 06, 96, 75, 5A, B8, 49, F3, 10, E2, BD, CF, 34, 82, DC, 14, CC, DE, 00, 97, 59, 4F, CC, 27, 71, 33, 28, 5E, 98, 01, B9, A7, 43, 5C, 8F, A3, D6, EC, 55, 3A, 2B, 9E, B1, 40, F0, 23, 72, B4, 5A, E1, 36, 49, CD, 5A, 0F, 3E, FA, A7, 25, 55, B2, 39, 76, 6F, 55, A3, 5A, 3A, A9, C7, B0, AC, 3E, DB, F1, 96, 72, 50, 9B, EA, 81, A9, 35, A6, 60, 38, 3A, CF, D3, 63, CA, 88, 42, 53, CD, 7F, CF, E2, 8A, 9C, 9F, B1, A6, 38, 70, EC, 73, 41, 1A, DB, 78, 2D, 60, 96, A3, 07, 44, 7C, DD, 5F, 09, 15, 72, A7...
 
[+]

Entropy:
7.9163  (probably packed)

Scan sdbus.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.