home

wfltdrvxp.sys

WFltDrv Device

SAFERZONE Corp.

Publisher:
SaferZone  (signed by SAFERZONE Corp.)

Product:
WFltDrv Device

Description:
WFltDrv Device Driver

Version:
2016, 12, 2, 6

MD5:
1ae7471129020034b4e3dc3e26d48f87

SHA-1:
8a4161b816f405e74b075b52893665a3c14cfd79

SHA-256:
447c3d421788abee3cdb648d579bbcb7549c4b80908f174aeb8b48a6a2c953d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:18:25 PM UTC  (a few moments ago)

File size:
271.7 KB (278,216 bytes)

Product version:
2016, 12, 2, 6

Copyright:
Copyright (c) SAFERZONE RND. All rights reserved.

Original file name:
WFltDrv.sys

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\wfltdrvxp.sys

Digital Signature
Signed by:
SAFERZONE Corp.

Authority:
VeriSign, Inc.

Valid from:
2/15/2014 9:00:00 AM

Valid to:
5/17/2017 8:59:59 AM

Subject:
CN=SAFERZONE Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SAFERZONE Corp., L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16275F9C7A2073FBCEA67F7385DF6892

File PE Metadata
Compilation timestamp:
12/2/2016 6:20:05 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

Entry address:
0x5738

Entry point:
55, 8B, EC, 51, E8, 2B, 09, 00, 00, 85, C0, 74, 0F, E8, 86, 08, 00, 00, B8, 01, 00, 00, C0, E9, B9, 02, 00, 00, 8B, 0D, 04, 61, 01, 00, 8B, 01, 53, 56, 57, FF, 50, 04, A1, 04, 61, 01, 00, 83, 65, FC, 00, C6, 40, 34, 04, A1, 04, 61, 01, 00, C6, 40, 35, 00, A1, 04, 61, 01, 00, 83, 60, 38, 00, A1, 04, 61, 01, 00, C7, 40, 3C, 12, 5A, 01, 00, A1, 04, 61, 01, 00, C7, 40, 40, 1E, 5A, 01, 00, A1, 04, 61, 01, 00, C7, 40, 44, 2A, 5A, 01, 00, A1, 04, 61, 01, 00, C7, 40, 48, 3C, 5A, 01, 00, A1, 04, 61, 01, 00, C7, 40...
 
[+]

Entropy:
1.3323

Developed / compiled with:
Microsoft Visual C++

Code size:
24.9 KB (25,472 bytes)

Scan wfltdrvxp.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.