home

unlockerdriver5.sys

Empty Loop

It runs as a Windows 64-bit kernel mode device driver named “UnlockerDriver5”.
Publisher:
Empty Loop  (signed and verified)

MD5:
9dc07e73a4abb9acf692113b36a5009f

SHA-1:
0c45b0fa0718e5aba0f21f14178597a1ed3fc208

SHA-256:
ca7176fc219515d58dcfa66ec61880ece5617275c9b83701bb74d8b60e733d34

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:58:18 PM UTC  (today)

File size:
12.1 KB (12,352 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\Program Files\unlocker\unlockerdriver5.sys

Digital Signature
Signed by:
Empty Loop

Authority:
VeriSign, Inc.

Valid from:
6/28/2010 8:00:00 PM

Valid to:
6/29/2011 7:59:59 PM

Subject:
CN=Empty Loop, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Empty Loop, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5961C71C9D3A6832E781555327428BE5

File PE Metadata
Compilation timestamp:
5/4/2010 7:29:15 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
192:dqD9l0Hvj1+z7PcFVyowJL/W6Mgb5+ebCfYEQpkqs1I5Zgjl50Xe:60HvozjeVYJLygbPbCQW1M6jYXe

Entry address:
0x3000

Entry point:
40, 53, 48, 83, EC, 60, 48, 8B, D9, 48, 8D, 15, 98, 10, 00, 00, 48, 8D, 4C, 24, 40, FF, 15, 35, 10, 00, 00, 48, 8D, 15, 4E, 10, 00, 00, 48, 8D, 4C, 24, 50, FF, 15, 23, 10, 00, 00, 4C, 8D, 9C, 24, 80, 00, 00, 00, 4C, 8D, 44, 24, 40, 4C, 89, 5C, 24, 30, 41, B9, 22, 00, 00, 00, 33, D2, 48, 8B, CB, C6, 44, 24, 28, 00, C7, 44, 24, 20, 00, 01, 00, 00, FF, 15, 03, 10, 00, 00, 85, C0, 0F, 85, C0, 00, 00, 00, 4C, 8D, 05, A4, EF, FF, FF, 48, 8D, 43, 70, B9, 03, 00, 00, 00, 66, 66, 66, 90, 66, 66, 90, 66, 66, 66, 90...
 
[+]

Entropy:
6.4641

Code size:
2.5 KB (2,560 bytes)

Driver
Display name:
UnlockerDriver5

Type:
Kernel device driver (KernelDriver)


The file unlockerdriver5.sys has been discovered within the following programs.

SkyFonts™  by Monotype Inc.
Publisher's description - “SkyFonts is a handy, lightweight utility that runs in the background of your Mac or PC and allows you to temporarily install desktop fonts and sync them on up to five of your workstations.”
www.fonts.com/browse/font-tools/skyfonts
About 2% of users remove it
Unlocker (64-bit)  by Created by Beslam
unlocker.emptyloop.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan unlockerdriver5.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.