» antilog64.sys
Overview
Analysis
File Details
Behaviors (1)

antilog64.sys

Zemana AntiLogger

Zemana Ltd.

It runs as a Windows 64-bit kernel mode device driver named “AntiLog32”.

File name:

antilog64.sys

Publisher:

Zemana Ltd. (signed and verified)

Product:

Zemana AntiLogger

Description:

Zemana AntiLogger Driver

Version:

1.9.2.501

MD5:

93aee3a75e3babeabb0709234fb15c97

SHA-1:

164a5dfc9e5c0dec8bd04243ebd5095f6c98283c

SHA-256:

de4aa3880f481fb70445b3fac1c4236e228d13cdfed879ee4e02ec060a56a225

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 2:37:38 AM UTC (today)

File size:

270.2 KB (276,696 bytes)

Product version:

1.9.2.501

Trademarks:

AntiLogger(tm) is a trademark of Zemana Ltd.

Original file name:

AntiLog32.sys

File type:

Driver (Win64 SYS)

Common path:

C:\Program Files\antilogger\antilog64.sys

Digital Signature

Signed by:

Zemana Ltd.

Authority:

VeriSign, Inc.

Valid from:

11/1/2010 8:00:00 AM

Valid to:

12/16/2011 7:59:59 AM

Subject:

CN=Zemana Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Zemana Ltd., L=Sofia, S=Lozenetz, C=BG

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

611B7654918B30D3917E7F667EA9E54B

File PE Metadata

Compilation timestamp:

7/14/2011 5:23:10 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

3072:k1TyIzC9CXFZHFVnJoU4kxDw9FTc2mVLBBDp0NdcpBPgga:IVzjFVnKYDw9FTc2mnlq+dFa

Entry address:

0x46494

Entry point:

48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 5E, FB, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 44, 42, 47, 56, 49, 45, 57, 43, 4C, 45, 41, 52, 0A, 00, CC, CC, 73, 69, 7A, 65, 6F, 66, 20, 72, 65, 67, 3D, 25, 64, 00, CC, CC, 41, 6E, 74, 69, 4C, 6F, 67, 33, 32, 20, 44, 72, 69, 76, 65, 72, 45, 6E, 74, 72, 79, 3A, 20, 25, 77, 5A, 20, 4E, 74, 42, 75, 69, 6C, 64, 4E, 75, 6D, 62, 65, 72, 20, 25, 64, 0A, 00, CC, CC, CC, 41, 6E, 74, 69... 
[+]

Entropy:

6.1925

Code size:

167.5 KB (171,520 bytes)

Driver

Display name:

AntiLog32

Type:

Kernel device driver (KernelDriver)

Scan antilog64.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.