home

tmp761b.tmp

Windows Codename Longhorn DDK driver

TestCertforWDK

Publisher:
Windows (R) Codename Longhorn DDK provider  (signed by TestCertforWDK)

Product:
Windows (R) Codename Longhorn DDK driver

Description:
Ring Cube Driver

Version:
6.0.6001.18000 built by: WinDDK

MD5:
960d32eda453a87e1ababa573637bcbc

SHA-1:
971fa4518f0aaac1419bda99c0304bc98ba7e2ec

SHA-256:
a991200b6d4b1fc49e116ad10827949862247afb8f2b76066c166cfa99ca900d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 3:17:34 AM UTC  (today)

File size:
171.2 KB (175,264 bytes)

Product version:
6.0.6001.18000

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mf.sys

Language:
English (United States)

Common path:
C:\windows\temp\tmp761b.tmp

Digital Signature
Signed by:
TestCertforWDK

Authority:
TestCertforWDK

Valid from:
10/15/2008 10:01:06 AM

Valid to:
1/1/2040 6:59:59 AM

Subject:
CN=TestCertforWDK

Issuer:
CN=TestCertforWDK

Serial number:
4885D94CDB1C28BA490F74A4A94B69A0

File PE Metadata
Compilation timestamp:
10/15/2008 10:01:05 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
3072:cbXLwNIXCUGO+aPalBzOHreJRLAJ+XWsIw9oZ3PjeX1:crE/8QtWfj41

Entry address:
0x2A06F

Entry point:
8B, FF, 55, 8B, EC, A1, D4, 64, 03, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1A, A1, 84, 90, 02, 00, 8B, 00, 35, D4, 64, 03, 00, A3, D4, 64, 03, 00, 75, 07, 8B, C1, A3, D4, 64, 03, 00, F7, D0, A3, D8, 64, 03, 00, 5D, E9, 59, FF, FF, FF, CC, 6D, 3A, 5C, 62, 75, 69, 6C, 64, 73, 5C, 62, 72, 61, 6E, 63, 68, 65, 73, 5C, 72, 32, 31, 31, 30, 5C, 70, 72, 6F, 6D, 6F, 74, 65, 64, 5C, 69, 6E, 63, 6F, 6D, 70, 6C, 65, 74, 65, 5F, 37, 35, 38, 39, 2D, 31, 31, 39, 30, 39, 2D, 32, 30, 30, 38, 31, 30, 31, 34, 5F...
 
[+]

Entropy:
6.4551

Code size:
100 KB (102,400 bytes)

Scan tmp761b.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.