home

spysheltertdi.sys

Datpol Janusz Siemienowicz

Publisher:
Datpol Janusz Siemienowicz  (signed and verified)

MD5:
a9a723f17657748c74a81e064565ad2a

SHA-1:
bc5aacade0972d26ffd5b4eef2a272127d8e4869

SHA-256:
19b51f44a633355f78d2faba9833a4a8fdad172f71d84d3e24206aaa1fd0a194

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:46:15 PM UTC  (today)

File size:
81.8 KB (83,768 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\Program Files\spyshelter firewall\spysheltertdi.sys

Digital Signature
Signed by:
Datpol Janusz Siemienowicz

Authority:
GlobalSign nv-sa

Valid from:
9/9/2012 3:58:51 AM

Valid to:
11/7/2013 7:09:30 PM

Subject:
E=biuro@datpol.com, CN=Datpol Janusz Siemienowicz, OU=Datpol, O=Datpol Janusz Siemienowicz, L=Olkusz, S=malopolskie, C=PL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EAB2799A417769A6985740A2E4F3F285

File PE Metadata
Compilation timestamp:
5/22/2013 10:06:12 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
1536:AoFMwX6R4CxwyS3nHnHbXRs3Rqcxk5vNuLErJ2XoXJSqA1w28zynVlpAvi3:AUgwy+HbXe38QkFNuL2SqA1wlzynWW

Entry address:
0x16D40

Entry point:
9C, FF, 34, 24, C7, 44, 24, 04, 25, AA, 03, FE, E9, 07, 00, 00, 00, 29, C6, E8, 08, 16, 00, 00, 9C, C7, 44, 24, 04, A3, 63, 69, C9, C7, 44, 24, 04, 48, C6, 7E, B3, 60, FF, 34, 24, FF, 74, 24, 04, 8D, 64, 24, 2C, E9, C2, A5, 00, 00, 9C, 9C, E9, F1, D7, FF, FF, 8A, 01, 60, 68, 2A, B6, 84, D3, F8, 88, C4, F8, 66, 89, 7C, 24, 04, F8, F5, C0, C8, 07, 66, 39, F9, 66, 89, 44, 24, 04, 2C, EB, 9C, E8, 0D, F5, FF, FF, 00, 00, 45, 78, 4E, 6F, 74, 69, 66, 79, 43, 61, 6C, 6C, 62, 61, 63, 6B, 00, E9, 68, 0F, 00, 00, E9...
 
[+]

Entropy:
7.5455

Code size:
26.5 KB (27,136 bytes)

Scan spysheltertdi.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.