home

wisefs64.sys

DriverDevelop.com

The file wisefs64.sys by DriverDevelop.com has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit file system device driver named “WiseFS”.
Publisher:
DriverDevelop.com  (signed and verified)

MD5:
d5350e9c1090022d4c31b6126214c5ee

SHA-1:
397d7c11c5f05e865782c751d10f5321d6a9f644

SHA-256:
148af0e96e7083e9f42e26877a22f72585cb23210599e34ca8e0820c6311abbc

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 10:03:11 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DriverDevelop.L
14.8.31.22

File size:
12.9 KB (13,200 bytes)

File type:
Driver (Win64 SYS)

Digital Signature
Signed by:
DriverDevelop.com

Authority:
DriverDevelop.com

Valid from:
8/15/2009 5:02:01 AM

Valid to:
8/13/2019 5:02:01 AM

Subject:
E=ca@zndev.com, CN=DriverDevelop.com Signtools Test cert, OU=Dept. CodeSign CA, O=DriverDevelop.com, S=BeiJing, C=CN

Issuer:
E=ca@zndev.com, CN=DriverDevelop.com CA, OU=DriverDevelop.com CA, O=DriverDevelop.com, L=BeiJing, S=BeiJing, C=CN

Serial number:
011E

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:V1hcyfFVCni0709l0Hse0F33dMqvPn8y8X0Tb:qytV4780HLAHdMqXyUb

Entry point:
48, 89, 54, 24, 10, 48, 89, 4C, 24, 08, 57, 48, 81, EC, 50, 01, 00, 00, C7, 44, 24, 20, 1C, 01, 00, 00, 48, 8D, 44, 24, 24, 48, 8B, F8, 33, C0, B9, 18, 01, 00, 00, F3, AA, 48, 8D, 4C, 24, 20, FF, 15, 32, C0, FF, FF, 89, 84, 24, 40, 01, 00, 00, 83, BC, 24, 40, 01, 00, 00, 00, 7D, 0C, 8B, 84, 24, 40, 01, 00, 00, E9, 9B, 00, 00, 00, 8B, 44, 24, 24, 89, 05, E3, D1, FF, FF, 4C, 8D, 05, D4, D1, FF, FF, 48, 8D, 15, F5, D0, FF, FF, 48, 8B, 8C, 24, 60, 01, 00, 00, E8, D2, B2, FF, FF, 89, 84, 24, 40, 01, 00, 00, 83...
 
[+]

Driver
Display name:
WiseFS

Description:
Wise File Filter Driver

Type:
File system 'filter' driver (FileSystemDriver)

Group:
FSFilter Activity Monitor

Depends on:
FltMgr


Remove wisefs64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.