ndistc.sys
Windows Packet Filter Kit
Sergey Aleksandrovich Kravchenko Private Entrepreneur
It runs as a Windows 64-bit kernel mode device driver named “TrueCafe Service”.
Publisher:
NT Kernel Resources  (signed by Sergey Aleksandrovich Kravchenko Private Entrepreneur)
 
Product:
Windows Packet Filter Kit
 
Description:
NDISTC helper driver
 
MD5:
8213836c11607fd997f6118caae38eb4
 
SHA-1:
c884c0005826a2a49de8642baa5cdc2a83698918
 
SHA-256:
f326475df4cd3e8ae2e2c19ca869860c7fa978823134fa6f0034bb5b20bbfa31
 
Scanner detections:
0 / 68
 
Status:
Clean (as of last analysis)
 
Analysis date:
11/4/2025 1:58:23 AM UTC  (today)
 
File size:
32.9 KB (33,640 bytes)
 
Copyright:
Copyright NT Kernel Resources© 2000-2008
 
Original file name:
ndistc.sys
 
File type:
Driver (Win64 SYS)
 
Language:
slovencina (Slovenská republika)
 
Common path:
C:\Windows\System32\drivers\ndistc.sys
 
Valid from:
8/31/2011 2:00:00 AM
 
Valid to:
9/16/2013 1:59:59 AM
 
Subject:
CN=Sergey Aleksandrovich Kravchenko Private Entrepreneur, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sergey Aleksandrovich Kravchenko Private Entrepreneur, L=Kharkiv, S=Kharkiv, C=UA
 
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
 
Serial number:
7AD85F54F03AF77E17CC208DC5127EB4
 
CTPH (ssdeep):
768:PSQnUrwvE/rlNWBd23f/mpJ7Voh/xhXuNTGLFmZ:PSQnUMIrfkc/mpNVodXuNTGoZ
 
Driver
Display name:
TrueCafe Service
Type:
Kernel device driver (KernelDriver)