home

zesndisim.sys.x64

Novell ZENworks Endpoint Security

Novell

Publisher:
Novell, Inc  (signed by Novell)

Product:
Novell ZENworks Endpoint Security

Description:
Novell ZESM NDIS Driver

Version:
11.2.2.239

MD5:
3d8aa2c1fbc51a29b3ac27341cd949a1

SHA-1:
4b3ff221b7ea441bb2bfeb14f9350443e2ddf7a5

SHA-256:
aa21c73edbe5f8ed1927f06098d5d76551b3e280d54ef4be9b0657e71c5c37ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 6:37:29 AM UTC  (today)

File size:
78.3 KB (80,216 bytes)

Product version:
11.2.2.239

Copyright:
Copyright (c) 2009 - 2012 Novell, Inc. All Rights Reserved.

Original file name:
ZESNDISIM.SYS

Language:
English (United States)

Common path:
C:\Program Files\novell\zenworks\esm\drivers\zesndisim.sys.x64

Digital Signature
Signed by:
Novell

Authority:
VeriSign, Inc.

Valid from:
2/17/2011 7:00:00 PM

Valid to:
3/9/2013 6:59:59 PM

Subject:
CN=Novell, OU=Systems and Resource Management, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Novell, L=Provo, S=Utah, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7D9C5B7591841E073989929769F23D80

File PE Metadata
Compilation timestamp:
6/25/2012 10:51:24 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
1536:i8jF8yFLBeahGT6TZVaKINzPSUwKwuR4AF8hzQor7RkpimTtDG8cLXRRCvkQBf29:i8aCdhGTOZrINb/qJ7RkpiEU8cbRRYkd

Entry address:
0x13410

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, DA, FB, FF, FF, CC, CC, 5A, 00, 65, 00, 73, 00, 6E, 00, 64, 00, 69, 00, 73, 00, 69, 00, 6D, 00, 00, 00, 48, 36, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 54, 37, 01, 00, B0, 01, 01, 00, 98, 34, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7E, 37, 01, 00, 00, 00, 01, 00, A8, 34, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 96, 3C, 01, 00, 10, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4597

Code size:
63.5 KB (65,024 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.