home

clfs.sys

Common Log File System Driver

Windows Main Build Lab Account

Publisher:
Microsoft Corporation  (signed by Windows Main Build Lab Account)

Product:
Microsoft® Windows® Operating System

Description:
Common Log File System Driver

Version:
6.1.7077.0 (winmain_win7rc.090404-1255)

MD5:
a0c01d2145815bfeeb3970c464b87d03

SHA-1:
295e14433521de5dce20856c2531a1fcceebde36

SHA-256:
412f212bc833a8c2016fa85b699e4df92ce5ed9470b884db770547b77110860a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 8:52:20 AM UTC  (today)

File size:
240.7 KB (246,496 bytes)

Product version:
6.1.7077.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
Clfs.Sys.MUI

File type:
Driver (Win32 SYS)

Language:
Language Neutral

Digital Signature
Signed by:
Windows Main Build Lab Account

Authority:
MSIT Test CodeSign CA 2

Valid from:
3/13/2009 4:39:14 PM

Valid to:
3/13/2010 4:39:14 PM

Subject:
CN=Windows Main Build Lab Account

Issuer:
CN=MSIT Test CodeSign CA 2, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:
29C9F976000100003536

File PE Metadata
Compilation timestamp:
4/9/2009 10:22:21 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
3072:pzMMM2HyoZbU1ZXEK4Xw/uCRkkxboAULGuA2Eyd+gHHfUVDv2Gmzu2jn2goL3cZI:pzSa+EBCVVoAUuw+gfIeRwLuKE19RoR

Entry address:
0x3C03E

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, EC, 96, FD, FF, CC, CC, A4, C0, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, EA, D0, 03, 00, 18, F0, 00, 00, 8C, C0, 03, 00, 00, 00, 00, 00, 00, 00, 00, 00, 6C, D1, 03, 00, 00, F0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 44, D1, 03, 00, 2E, D1, 03, 00, 18, D1, 03, 00, 04, D1, 03, 00, 58, D1, 03, 00, 00, 00, 00, 00, AE, C3, 03, 00, C6, C3, 03, 00, DA, C3, 03, 00, F6, C3, 03, 00, 0C, C4, 03, 00, 1C, C4, 03, 00, 34, C4...
 
[+]

Entropy:
6.4976

Code size:
210 KB (215,040 bytes)

Scan clfs.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.