WinDetect.sys
WinDetect
Valery Kuzniatsou
The file WinDetect.sys, “WinDetect log driver” by Valery Kuzniatsou has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit kernel mode device driver named “WinDetect driver”.
Publisher:
HeavenWard (signed by Valery Kuzniatsou)
Description:
WinDetect log driver
MD5:
64eedebf574a3f4b7c19b4decdac8f2c
SHA-1:
ac8a0a8ec084c11f06e5e5809679a8fb0a68d092
SHA-256:
60452d0716617e8ac9d306fe398b5f71137b5b647aa7e35df22c6fcfa7b352aa
Scanner detections:
1 / 68
Status:
Potentially unwanted
Analysis date:
4/25/2024 6:08:13 PM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.ValeryKuzniatsou.M
14.7.31.23
File size:
16.1 KB (16,456 bytes)
Copyright:
Copyright (C) 2014. Valery Kuzniatsou.
Original file name:
WinDetect.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\windetect.sys
Authority:
COMODO CA Limited
Valid from:
5/8/2013 2:00:00 AM
Valid to:
5/9/2014 1:59:59 AM
Subject:
CN=Valery Kuzniatsou, O=Valery Kuzniatsou, STREET=Slobodskaia st. 167-101, L=Minsk, S=Minsk, PostalCode=220025, C=BY
Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
00A601E2C6237BBF4FBBC63FF2151AF4B9
CTPH (ssdeep):
192:vt+tRgd5vFJyE2/iO11rYEAmzdg9WUbQE+yMrj6938LWM1xg2nhboj:v5PD526ig9WUbQEFMC18Bhboj
Driver
Display name:
WinDetect driver
Type:
Kernel device driver (KernelDriver)