home

zntport.sys

NTPort Library

LI Hai

It runs as a Windows 64-bit kernel mode device driver named “NTPort Library Driver”.
Publisher:
Zeal SoftStudio  (signed by LI Hai)

Product:
NTPort Library

Description:
zntport

Version:
2, 5, 0, 1

MD5:
bdfa6a3a7ce1d083889b316a484a356a

SHA-1:
762f7dfb455de99bee325a5024be8eefbe781015

SHA-256:
9c8b33643439d7c28acea0873c47301b830167f2455b53822c84ff5910330023

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 5:41:09 AM UTC  (today)

File size:
13.8 KB (14,168 bytes)

Product version:
2, 5, 0, 1

Copyright:
Copyright © 1997-2000 Hai Li, Zeal SoftStudio.

Original file name:
zntport.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\zntport.sys

Digital Signature
Signed by:
LI Hai

Authority:
GlobalSign nv-sa

Valid from:
3/7/2007 11:20:52 AM

Valid to:
3/7/2008 11:20:52 AM

Subject:
E=zealsoft@gmail.com, CN=LI Hai, C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001112BB3725A

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:7oRVxSXBApDSWXKLQNW2oWp1wAoxhSF6OOoe068jSJUbueqHNPxPEo5z:qyXCpesKLQCWUf2OJ06dUb+5z

Entry point:
55, 8B, EC, 83, EC, 5C, 56, 57, 6A, 08, BE, 6E, 06, 01, 00, 59, 8D, 7D, CC, F3, A5, 6A, 0A, BE, 8E, 06, 01, 00, 59, 8D, 7D, A4, F3, A5, 68, 00, 20, 00, 00, FF, 15, B4, 02, 01, 00, 33, FF, A3, 60, 08, 01, 00, 3B, C7, 75, 07, B8, 9A, 00, 00, C0, EB, 63, E8, 74, FC, FF, FF, 8B, 35, A0, 02, 01, 00, 8D, 45, CC, 50, 8D, 45, F4, 50, FF, D6, 8D, 45, A4, 50, 8D, 45, EC, 50, FF, D6, 8B, 75, 08, 8D, 45, FC, 50, 57, 57, 8D, 45, F4, 68, 00, F1, 00, 00, 50, 57, 56, FF, 15, B0, 02, 01, 00, 3B, C7, 7C, 26, 8D, 45, F4, 50...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Driver
Display name:
NTPort Library Driver

Service name:
zntport

Type:
Kernel device driver (KernelDriver)


Scan zntport.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.