home

ataport.sys

ATAPI Driver Extension

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
ATAPI Driver Extension

Version:
6.4.9879.0 (fbl_release.141103-1722)

MD5:
d6e57e530997711aba2b615cb13d3a69

SHA-1:
cef99ce18f4d84db0ce6f536f3678f5ab0e6d242

SHA-256:
36eaa59b856fe76082090d33a577b76e1c38a7e2865fe611d5df2f3ef6628b35

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 11:12:27 AM UTC  (today)

File size:
192 KB (196,640 bytes)

Product version:
6.4.9879.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
ataport.sys

File type:
Driver (Win64 SYS)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/5/2014 8:09:18 AM

Valid to:
5/2/2015 8:09:18 AM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Development PCA 2014, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000082A274893CA252BEBD000000000082

File PE Metadata
Compilation timestamp:
11/4/2014 8:38:07 AM

OS version:
6.4

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
12.10

CTPH (ssdeep):
3072:JyzQFmMHgMj5B6j1fsq3bAzLgZLm8Ptcp96Ada0RlB+c:QzQQegIv4fnsalcyAdZX+c

Entry address:
0x2C010

Entry point:
48, 83, EC, 28, E8, 07, 00, 00, 00, 33, C0, 48, 83, C4, 28, C3, 48, 8B, 05, 31, E0, FE, FF, 48, 85, C0, 74, 1A, 48, B9, 32, A2, DF, 2D, 99, 2B, 00, 00, 48, 3B, C1, 74, 0B, 48, F7, D0, 48, 89, 05, 0B, E0, FE, FF, C3, B9, 06, 00, 00, 00, CD, 29, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
132 KB (135,168 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.