home

usft_wifi-64.sys

Snif

NELCOM s.r.o.

It runs as a Windows 64-bit kernel mode device driver named “UfasoftWiFiDriver”.
Publisher:
Ufasoft  (signed by NELCOM s.r.o.)

Product:
Snif

Description:
Wi-Fi driver

Version:
7.0.2125.0

MD5:
6c955262de0c1b80235e34a63dbb2d11

SHA-1:
c8461d238c644ebca9be856ed57b9cd3c6997b4c

SHA-256:
a183b72ca53fec165c370db313b5baeaf37fc38a73e4f7473c4add762f4b4737

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:51:14 PM UTC  (today)

File size:
719.1 KB (736,384 bytes)

Product version:
4.159

Copyright:
Copyright (c) 1997-2012 Ufasoft

Original file name:
usft_wifi.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Program Files\ufasoft\snif\usft_wifi-64.sys

Digital Signature
Signed by:
NELCOM s.r.o.

Authority:
GlobalSign nv-sa

Valid from:
7/5/2011 7:00:19 AM

Valid to:
8/15/2012 3:19:38 PM

Subject:
CN=NELCOM s.r.o., O=NELCOM s.r.o., L=Prague, S=Prague, C=CZ

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EA05BF431BA40A9009102415B9BCF164

File PE Metadata
Compilation timestamp:
12/17/2011 4:39:18 PM

OS version:
5.0

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
12288:Cs9H9xDTvfrSTJo6QiQZARFASy++rQ1/r:hH9xvvCHQiRh//r

Entry address:
0xAF34C

Entry point:
48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 55, 41, 54, 41, 57, 48, 8D, 68, A1, 48, 81, EC, E0, 00, 00, 00, 48, 8B, FA, 48, 8B, F1, E8, 42, CB, F8, FF, 41, BC, 00, 00, 00, C0, 44, 8B, C0, 8B, D8, 45, 23, C4, 45, 3B, C4, 75, 0A, E8, B6, CB, F8, FF, E9, 07, 01, 00, 00, 45, 33, FF, C7, 44, 24, 30, 40, 00, 00, 00, BB, 19, 00, 02, 00, 4C, 8D, 05, FE, 3D, F9, FF, 48, 8D, 4D, F7, 41, 8D, 57, 02, 45, 33, C9, 89, 5C, 24, 28, 44, 89, 7C, 24, 20, E8, 9D, DD, FF, FF, C7, 44, 24, 30, 40, 00, 00, 00, 4C...
 
[+]

Code size:
270.1 KB (276,576 bytes)

Driver
Display name:
UfasoftWiFiDriver

Type:
Kernel device driver (KernelDriver)


Scan usft_wifi-64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.