home

aclmfo764.sys

ArchiCrypt Live Engine

Softwareentwicklung Patric Remus

It runs as a Windows 64-bit kernel mode device driver named “ACLMo7Live”.
Publisher:
Softwareentwicklung Remus - ArchiCrypt   (signed by Softwareentwicklung Patric Remus)

Product:
ArchiCrypt Live Engine

Version:
16, 2, 2, 0

MD5:
b89124d0c5d397024d81ff861a9c164d

SHA-1:
7498ffa68e7c41f28dae701f810ed9fe612035d6

SHA-256:
ade32536d04050aab3e268d0f3d462412c359a39ecdf577697b4ae4793017f21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/26/2025 11:44:06 AM UTC  (today)

File size:
83.1 KB (85,088 bytes)

Product version:
16, 2, 2, 0

Copyright:
Copyright (C) 1998-2007

Trademarks:
ArchiCrypt

Original file name:
ACLive.sys

File type:
Driver (Win64 SYS)

Language:
French (France)

Common path:
C:\Windows\System32\drivers\aclmfo764.sys

Digital Signature
Signed by:
Softwareentwicklung Patric Remus

Authority:
GlobalSign nv-sa

Valid from:
11/20/2006 2:23:37 PM

Valid to:
11/20/2007 2:23:37 PM

Subject:
E=Anfrage@ArchiCrypt.com, CN=Softwareentwicklung Patric Remus - ArchiCrypt -, O=Softwareentwicklung Patric Remus, C=DE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000010F05893D70

File PE Metadata
Compilation timestamp:
10/30/2007 2:19:42 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
1536:OMqqU+NV2fbbbzS2CMWsUW8tko7mDEErvQho2XEn173+lJLaGI+Iid:OMqqDL2/Sko2dqo4E1r+lYGF

Entry address:
0x122D4

Entry point:
48, 53, 56, 57, B8, B0, 00, 00, 00, E8, E6, D9, FF, FF, 48, 2B, E0, 48, 8B, FA, 48, 8B, F1, 33, DB, 89, 9C, 24, D8, 00, 00, 00, 48, 8D, 0D, 25, 02, 00, 00, E8, 20, DE, FF, FF, 66, 89, 5C, 24, 30, 0F, B7, 07, 66, 05, 18, 00, 66, 89, 44, 24, 32, 0F, B7, D0, 8D, 4B, 01, 41, B8, 44, 64, 6B, 20, FF, 15, D5, E0, FE, FF, 48, 89, 44, 24, 38, 48, 3B, C3, 75, 0A, B8, 9A, 00, 00, C0, E9, 24, 01, 00, 00, 48, 8B, D7, 48, 8D, 4C, 24, 30, FF, 15, DB, E0, FE, FF, 48, 8D, 15, BC, 01, 00, 00, 48, 8D, 4C, 24, 30, FF, 15, C1...
 
[+]

Code size:
68.2 KB (69,792 bytes)

Driver
Display name:
ACLMo7Live

Type:
Kernel device driver (KernelDriver)


Scan aclmfo764.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.