home

usft_wifi-64.sys

Snif

NELCOM s.r.o.

It runs as a Windows 64-bit kernel mode device driver named “UfasoftWiFiDriver”.
Publisher:
Ufasoft  (signed by NELCOM s.r.o.)

Product:
Snif

Description:
Wi-Fi driver

Version:
6.0.1994.0

MD5:
299cdb63d9e6483c1f388daebc02e5a1

SHA-1:
b9bebcf26011b03e35433737f93972e36cd1fed6

SHA-256:
ecf223e3a8d57ef12bb47bdbad7ff245a24b84a3eda390fd41963066e3ee5a59

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 7:22:52 PM UTC  (today)

File size:
718.8 KB (736,032 bytes)

Product version:
4.158

Copyright:
Copyright (c) 1997-2011 Ufasoft

Original file name:
usft_wifi.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Program Files\ufasoft\snif\usft_wifi-64.sys

Digital Signature
Signed by:
NELCOM s.r.o.

Authority:
GlobalSign nv-sa

Valid from:
7/5/2011 5:00:19 AM

Valid to:
8/15/2012 1:19:38 PM

Subject:
CN=NELCOM s.r.o., O=NELCOM s.r.o., L=Prague, S=Prague, C=CZ

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EA05BF431BA40A9009102415B9BCF164

File PE Metadata
Compilation timestamp:
8/8/2011 2:20:40 PM

OS version:
1.10

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
10.0

CTPH (ssdeep):
12288:2oONd07fy6DuDrDd0mguO0kE43sARFAS/++rQ1+B+:nONdgfnLcOnE4lI/+o

Entry address:
0xAF26C

Entry point:
48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 55, 41, 55, 41, 56, 48, 8D, 68, A1, 48, 81, EC, E0, 00, 00, 00, 48, 8B, FA, 48, 8B, F1, E8, 86, C7, F8, FF, 41, BE, 00, 00, 00, C0, 44, 8B, C0, 8B, D8, 45, 23, C6, 45, 3B, C6, 75, 0A, E8, 8E, C6, F8, FF, E9, 07, 01, 00, 00, 45, 33, ED, C7, 44, 24, 30, 40, 00, 00, 00, BB, 19, 00, 02, 00, 4C, 8D, 05, BE, 43, F9, FF, 48, 8D, 4D, F7, 41, 8D, 55, 02, 45, 33, C9, 89, 5C, 24, 28, 44, 89, 6C, 24, 20, E8, F9, E0, FF, FF, C7, 44, 24, 30, 40, 00, 00, 00, 4C...
 
[+]

Entropy:
6.3269

Code size:
270.3 KB (276,736 bytes)

Driver
Display name:
UfasoftWiFiDriver

Type:
Kernel device driver (KernelDriver)


Scan usft_wifi-64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.