home

usft_wifi-64.sys

Snif

NELCOM s.r.o.

It runs as a Windows 64-bit kernel mode device driver named “UfasoftWiFiDriver”.
Publisher:
Ufasoft  (signed by NELCOM s.r.o.)

Product:
Snif

Description:
Wi-Fi driver

Version:
5.0.1773.0

MD5:
0e60dc1f0ae99da62879f3066114812c

SHA-1:
bf7aa254e9ec58ac3863897b2b4497c94c44df9d

SHA-256:
a3b4a855a3379f7c1ad532168c14c6dd48c494ea7bd29b69c935e1d010bf9909

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 11:59:49 AM UTC  (today)

File size:
718.9 KB (736,152 bytes)

Product version:
4.148

Copyright:
Copyright (c) 1997-2011 Ufasoft

Original file name:
usft_wifi.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Program Files\ufasoft\snif\usft_wifi-64.sys

Digital Signature
Signed by:
NELCOM s.r.o.

Authority:
GlobalSign nv-sa

Valid from:
7/16/2010 1:19:41 AM

Valid to:
7/17/2011 1:19:39 AM

Subject:
CN=NELCOM s.r.o., O=NELCOM s.r.o., L=Prague, S=Prague, C=CZ

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000129D78C0D5F

File PE Metadata
Compilation timestamp:
12/31/2010 1:43:27 AM

OS version:
1.10

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
10.0

CTPH (ssdeep):
12288:DPf7IHdogpdVTIdfllAlnNugot7ARFASQ++rQ1Fq9:7f7I9o7HAlNugoir/Fq9

Entry address:
0xAEE6C

Entry point:
48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 55, 41, 55, 41, 56, 48, 8D, 68, A1, 48, 81, EC, E0, 00, 00, 00, 48, 8B, FA, 48, 8B, F1, E8, E2, CA, F8, FF, 41, BE, 00, 00, 00, C0, 44, 8B, C0, 8B, D8, 45, 23, C6, 45, 3B, C6, 75, 0A, E8, EA, C9, F8, FF, E9, 07, 01, 00, 00, 45, 33, ED, C7, 44, 24, 30, 40, 00, 00, 00, BB, 19, 00, 02, 00, 4C, 8D, 05, 96, 44, F9, FF, 48, 8D, 4D, F7, 41, 8D, 55, 02, 45, 33, C9, 89, 5C, 24, 28, 44, 89, 6C, 24, 20, E8, F9, E0, FF, FF, C7, 44, 24, 30, 40, 00, 00, 00, 4C...
 
[+]

Code size:
269.5 KB (276,000 bytes)

Driver
Display name:
UfasoftWiFiDriver

Type:
Kernel device driver (KernelDriver)


Scan usft_wifi-64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.