» antilog64.sys
Overview
Analysis
File Details

antilog64.sys

Zemana AntiLogger

Zemana Ltd.

File name:

antilog64.sys

Publisher:

Zemana Ltd. (signed and verified)

Product:

Zemana AntiLogger

Description:

Zemana AntiLogger Driver

Version:

1.9.2.501

MD5:

3d9ef1ae2b25bf800abe27ab1dab422f

SHA-1:

362ff9a624024630c2ac8298df42eee6da331b38

SHA-256:

c13be059c764dc72fcdad666a0c0121ed9dd7a27cb44767038601719a756ba9a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/2/2024 3:19:15 PM UTC (today)

File size:

271.2 KB (277,720 bytes)

Product version:

1.9.2.501

Trademarks:

AntiLogger(tm) is a trademark of Zemana Ltd.

Original file name:

AntiLog32.sys

File type:

Driver (Win64 SYS)

Language:

English (United States)

Common path:

C:\Program Files\antilogger\antilog64.sys

Digital Signature

Signed by:

Zemana Ltd.

Authority:

VeriSign, Inc.

Valid from:

10/31/2010 5:00:00 PM

Valid to:

12/15/2011 3:59:59 PM

Subject:

CN=Zemana Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Zemana Ltd., L=Sofia, S=Lozenetz, C=BG

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

611B7654918B30D3917E7F667EA9E54B

File PE Metadata

Compilation timestamp:

8/22/2011 7:17:10 AM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

3072:5uQXG+8oXFZHFVnJoU4kxDw9FTc2mVLBBDp06ivgYVdAgo:k0G6FVnKYDw9FTc2mnlyIolo

Entry address:

0x46494

Entry point:

48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 5E, FB, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 44, 42, 47, 56, 49, 45, 57, 43, 4C, 45, 41, 52, 0A, 00, CC, CC, 73, 69, 7A, 65, 6F, 66, 20, 72, 65, 67, 3D, 25, 64, 00, CC, CC, 41, 6E, 74, 69, 4C, 6F, 67, 33, 32, 20, 44, 72, 69, 76, 65, 72, 45, 6E, 74, 72, 79, 3A, 20, 25, 77, 5A, 20, 4E, 74, 42, 75, 69, 6C, 64, 4E, 75, 6D, 62, 65, 72, 20, 25, 64, 0A, 00, CC, CC, CC, 41, 6E, 74, 69... 
[+]

Entropy:

6.2009

Code size:

168.5 KB (172,544 bytes)

Scan antilog64.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.