home

swdumon.sys

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

MD5:
814fbf21c74f540b1e686042106114ca

SHA-1:
a2ce7eadd7371671c6caaf0239d906b925f5364d

SHA-256:
407211395624dc2456e7fc433c184eae0aa79f80c25bb6ee80ab356e69396578

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 12:34:59 PM UTC  (today)

File size:
13.1 KB (13,464 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\users\{user}\appdata\local\slimware utilities inc\driverupdate\swdumon.sys

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
5/16/2013 1:20:13 PM

Valid to:
8/16/2014 1:20:13 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000020C8E989174AADFCE6000000000020

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:wZiOaqR12c6tvXScZyf4pBjS6OjGvP6MROk1CXI3e7vFv:R2cNvXS5wpBjbOjBMwk1CXI3i

Entry point:
30, 82, 23, 11, 06, 09, 2A, 86, 48, 86, F7, 0D, 01, 07, 02, A0, 82, 23, 02, 30, 82, 22, FE, 02, 01, 01, 31, 0B, 30, 09, 06, 05, 2B, 0E, 03, 02, 1A, 05, 00, 30, 82, 07, 81, 06, 09, 2B, 06, 01, 04, 01, 82, 37, 0A, 01, A0, 82, 07, 72, 30, 82, 07, 6E, 30, 0C, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 01, 04, 10, B8, 55, 5A, EA, 82, 19, 9B, 49, 91, EB, 7E, BF, 85, 2A, D4, CD, 17, 0D, 31, 33, 31, 31, 31, 33, 31, 33, 35, 39, 33, 38, 5A, 30, 0E, 06, 0A, 2B, 06, 01, 04, 01, 82, 37, 0C, 01, 02, 05, 00, 30, 82, 06...
 
[+]

Entropy:
6.9220

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.