home

UsbEntL2.sys

USB Flash Security

KASHU SYSTEM DESIGN INC.

Publisher:
KASHU SYSTEM DESIGN INC.  (signed and verified)

Product:
USB Flash Security

Description:
UsbEnter Low Level Driver

Version:
4.1.12.14 built by: WinDDK

MD5:
cc02efff6fb876524e5389ec9739b643

SHA-1:
4772c636f6dea4feefb18b9e09fd712bb9b708a4

SHA-256:
1be9508e727e846b848da14228ec3fb4216e274f2872a43145c4a0dd87ef8d94

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:09:41 PM UTC  (today)

File size:
15.2 KB (15,576 bytes)

Product version:
4.1.12.14

Copyright:
© KASHU SYSTEM DESIGN INC.

Original file name:
UsbEntL2.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\usbentl2.sys

Digital Signature
Signed by:
KASHU SYSTEM DESIGN INC.

Authority:
GlobalSign nv-sa

Valid from:
8/1/2013 5:57:11 AM

Valid to:
9/28/2014 9:45:48 AM

Subject:
CN=KASHU SYSTEM DESIGN INC., OU=Development, O=KASHU SYSTEM DESIGN INC., L=KAMEOKA, S=KYOTO, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121DDDBDB3EC6209B2F7B113AED35D11DD4

File PE Metadata
Compilation timestamp:
8/15/2015 3:59:04 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
192:F2sf3TDyAxsCaGVZQmPy5h0rllMxq4wy4TgBxe1HCjw/l0i05JsxxmQ:wQTDyKslMQp0rlc28K354aYQ

Entry address:
0x60C4

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 26, FF, FF, FF, CC, CC, 10, 61, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 3E, 64, 00, 00, 00, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, F0, 61, 00, 00, 00, 00, 00, 00, 08, 62, 00, 00, 00, 00, 00, 00, 20, 62, 00, 00, 00, 00, 00, 00, 34, 62, 00, 00, 00, 00, 00, 00, 4C, 62, 00, 00, 00, 00, 00, 00, 5E, 62, 00, 00, 00, 00, 00, 00, 6C, 62, 00, 00...
 
[+]

Entropy:
6.0050

Code size:
7 KB (7,168 bytes)

Scan UsbEntL2.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.