home

vrtaucbl.sys

Virtual Audio Cable

NTONYX Ltd.

Publisher:
Eugene V. Muzychenko  (signed by NTONYX Ltd.)

Product:
Virtual Audio Cable

Description:
Kernel-mode WDM driver

Version:
4.9.0.2157

MD5:
01552f63e56f79008b07a38fcc1f6d44

SHA-1:
ce067dc40f1e0fe478910e9f083af478be277334

SHA-256:
caee9f2ae8805e8c621a45a058ec022852cbb6b3e13be162cb41ed06b8a3546f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:41:10 AM UTC  (today)

File size:
46.3 KB (47,400 bytes)

Product version:
4.9.0.1652

Copyright:
Copyright (C) 1998-2008 Eugene V. Muzychenko

Original file name:
vrtaucbl.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\i386\vrtaucbl.sys

Digital Signature
Signed by:
NTONYX Ltd.

Authority:
VeriSign, Inc.

Valid from:
1/7/2010 7:00:00 PM

Valid to:
1/9/2011 6:59:59 PM

Subject:
CN=NTONYX Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NTONYX Ltd., L="Novosibirsk ", S=Novosibirsk region, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5B2EE1A0AF4BB7A617EF9BFB6A36AF0F

File PE Metadata
Compilation timestamp:
6/10/2008 9:44:06 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
768:oELMAKtz9Aczow4YgYc0OQMNg4/YmpdlyxO/8v/o/nSx2hL6wbCrjMmR8C:oELvkAUMYgYVm3QqlygA/gSxumkC3DOC

Entry address:
0x8C90

Entry point:
8B, FF, 55, 8B, EC, 57, B1, 56, E8, 43, EA, FF, FF, 8B, 7D, 0C, 0F, B7, 0F, 8B, 47, 04, 50, D1, E9, 51, 68, F8, 7D, 01, 00, 68, 70, 8A, 01, 00, FF, 15, 90, 79, 01, 00, A1, 14, 8A, 01, 00, 83, C4, 10, 85, C0, 74, 0A, B8, 0E, 01, 00, C0, 5F, 5D, C2, 08, 00, 56, 6A, 00, E8, 98, E9, FF, FF, 83, C4, 04, 84, C0, 75, 12, BE, 01, 00, 00, C0, E8, 57, 9E, FF, FF, 8B, C6, 5E, 5F, 5D, C2, 08, 00, A0, A1, 8B, 01, 00, 84, C0, 74, 05, E8, 91, A3, FF, FF, C7, 05, 68, 8A, 01, 00, 00, 00, 00, 00, 66, C7, 05, 64, 8A, 01, 00...
 
[+]

Entropy:
6.4665

Code size:
31 KB (31,744 bytes)

Scan vrtaucbl.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.