home

EkaProt6.SYS

Ekahau Site Survey Protocol Driver

Ekahau Inc.

It runs as a Windows 64-bit kernel mode device driver named “Ekahau User Protocol Driver for NDIS 6”.
Publisher:
Ekahau Inc.  (signed and verified)

Product:
Ekahau Site Survey Protocol Driver

Description:
Ekahau User mode I/O Driver

Version:
6.1.0.268 built by: WinDDK

MD5:
1f30a7f39413cbe3b065048349ea2b99

SHA-1:
e8265bd002c109c64bba3a0a0755284bbeedc315

SHA-256:
121fb09c607afc6455614d976108024f146a60eee52888d0dcade36c196b6be0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:43:40 PM UTC  (a few moments ago)

File size:
23.1 KB (23,704 bytes)

Product version:
6.1.0.268

Copyright:
Copyright (C) 2001-2010 Ekahau, Inc.

Original file name:
EkaProt6.SYS

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\ekaprot6.sys

Digital Signature
Signed by:
Ekahau Inc.

Authority:
GlobalSign nv-sa

Valid from:
5/14/2010 8:42:17 AM

Valid to:
5/7/2012 12:50:25 PM

Subject:
CN=Ekahau Inc., O=Ekahau Inc., L=Helsinki, S=Uusimaa, C=FI

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012895C2948E

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:BfOaV4/UnlVEe61I6TTauUKrOykOYLITTu5DQ9SJ18j+pKvNE54XdUb+MIax:BHV4/kXEsUJU4qITTu5DQ6C+ziMIs

Entry point:
8B, FF, 55, 8B, EC, A1, 18, 42, 01, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1A, A1, 6C, 30, 01, 00, 8B, 00, 35, 18, 42, 01, 00, A3, 18, 42, 01, 00, 75, 07, 8B, C1, A3, 18, 42, 01, 00, F7, D0, A3, 1C, 42, 01, 00, 5D, E9, E7, FD, FF, FF, CC, 45, 00, 4B, 00, 41, 00, 50, 00, 52, 00, 4F, 00, 54, 00, 36, 00, 00, 00, 5C, 00, 47, 00, 6C, 00, 6F, 00, 62, 00, 61, 00, 6C, 00, 3F, 00, 3F, 00, 5C, 00, 45, 00, 6B, 00, 61, 00, 50, 00, 72, 00, 6F, 00, 74, 00, 36, 00, 00, 00, 5C, 00, 44, 00, 65, 00, 76, 00, 69...
 
[+]

Driver
Display name:
Ekahau User Protocol Driver for NDIS 6

Service name:
EkaProt6

Description:
@oem22.inf,%EKAHAU_Desc%;Ekahau User Protocol Driver for NDIS 6

Type:
Kernel device driver (KernelDriver)

Group:
NDIS


Scan EkaProt6.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.