home

ataport.sys

ATAPI Driver Extension

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
ATAPI Driver Extension

Version:
6.4.9879.9 (fbl_release_currentfr.141205-1804)

MD5:
242198e88be5b4c2e84904cc358549aa

SHA-1:
80a38457f47fd5c00d56252d367c91eb269fbc8f

SHA-256:
53910db7690577161440db36f147cd4a6b1b2ab195150372354c533646f93f9c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 11:39:13 PM UTC  (a few moments ago)

File size:
192 KB (196,640 bytes)

Product version:
6.4.9879.9

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
ataport.sys

File type:
Driver (Win64 SYS)

Language:
Language Neutral

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/4/2014 10:09:18 PM

Valid to:
5/1/2015 10:09:18 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Development PCA 2014, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000082A274893CA252BEBD000000000082

File PE Metadata
Compilation timestamp:
12/5/2014 11:28:38 PM

OS version:
6.4

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
12.10

CTPH (ssdeep):
3072:xyzQFmMHgMj5B6j1fsq3bAz1gZLm8P73p96Ada7uMhYB+c:YzQQegIv4fnssz3yAdys+c

Entry address:
0x2C010

Entry point:
48, 83, EC, 28, E8, 07, 00, 00, 00, 33, C0, 48, 83, C4, 28, C3, 48, 8B, 05, 31, E0, FE, FF, 48, 85, C0, 74, 1A, 48, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 3B, C1, 74, 0B, 48, F7, D0, 48, 89, 05, 0B, E0, FE, FF, C3, B9, 06, 00, 00, 00, CD, 29, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.2249

Code size:
132 KB (135,168 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.