» EAHDEventLogMove.dll
Overview
Analysis
File Details
Programs (2)

EAHDEventLogMove.dll

SEE Full Disk

Symantec Corporation

This is installed with multiple programs including Symantec Endpoint Encryption Full Disk Edition Client and Symantec Endpoint Encryption Framework Client.

File name:

EAHDEventLogMove.dll

Publisher:

Symantec Corporation (signed and verified)

Product:

SEE Full Disk

Description:

EAHDEventLogMove Dynamic Link Library

Version:

528.51.0.1

MD5:

622c7c97d361aacc02d6c22bef83ae0d

SHA-1:

d9b081e7983a104f46ebc2c39a9f3176a436c702

SHA-256:

4e65e549ca9cb230ec54556cbf0da416fc34bd8a10a1a2b5929882b6ada5829c

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 12:41:27 PM UTC (today)

File size:

42.7 KB (43,680 bytes)

Product version:

8.2.1.0

Original file name:

EAHDEventLogMove.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\symantec\symantec endpoint encryption clients\eahdeventlogmove.dll

Digital Signature

Signed by:

Symantec Corporation

Authority:

VeriSign, Inc.

Valid from:

10/6/2010 8:00:00 PM

Valid to:

10/6/2013 7:59:59 PM

Subject:

CN=Symantec Corporation, OU=Research & Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Mountain View, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4A9171B8CAFA5E2B2A1370E12D8B0D58

File PE Metadata

Compilation timestamp:

8/27/2012 12:58:00 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

768:VXmFGs+kaMXpNjGLcReHYf5WjvFu8MKNR28qOgj+y/gIILWMmibCSXi:/0aM/j4u5ovFu8MKb2LOgj+ygaDKCSS

Entry address:

0x5042

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 06, 04, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, CC, FF, 25, 18, 61, 00, 10, FF, 25, 1C, 61, 00, 10, 68, 3B, 4C, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 20, 91, 00, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F... 
[+]

Entropy:

6.1773

Code size:

18.5 KB (18,944 bytes)

The file EAHDEventLogMove.dll has been discovered within the following programs.

Symantec Endpoint Encryption Framework Client by Symantec Corporation

Publisher's description - “Symantec Endpoint Encryption software provides advanced data encryption and file encryption for desktops, laptops, and removable storage devices. It offers scalable, enterprise-wide security that prevents unauthorized access by using strong access control and powerful encryption.”

www.symantec.com

7% remove it

Symantec Endpoint Encryption Full Disk Edition Client by Symantec Corporation

www.symantec.com/endpoint-encryption

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.