» AAFsFlt.sys
Overview
Analysis
File Details
Behaviors (1)

AAFsFlt.sys

AppAssure Replay

Dell Inc

It runs as a Windows 64-bit file system device driver named “AAFsFlt”.

File name:

AAFsFlt.sys

Publisher:

Dell Inc. (signed by Dell Inc)

Product:

AppAssure Replay

Description:

AppAssure File System Filter Driver

Version:

6.1.0.10674 built by: WinDDK

MD5:

4b2b0e8d2793645503c7ac487be425c6

SHA-1:

a02db1fddc6ae00915a5c57b178a348b4e74778d

SHA-256:

c48d269438a6373849b9781f0850d0bbf4e5a301b96843fbdf88f986c0d9c8bc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:13:30 AM UTC (today)

File size:

75.1 KB (76,864 bytes)

Product version:

6.1.0.10674

Original file name:

AAFsFlt.sys

File type:

Driver (Win64 SYS)

Language:

English (United States)

Common path:

C:\Windows\System32\drivers\aafsflt.sys

Digital Signature

Signed by:

Dell Inc

Authority:

VeriSign, Inc.

Valid from:

10/14/2015 3:00:00 AM

Valid to:

9/17/2018 2:59:59 AM

Subject:

CN=Dell Inc, O=Dell Inc, L=Round Rock, S=Texas, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

7BB30E5EDD6D85A3820F74BE6820E616

File PE Metadata

Compilation timestamp:

3/25/2016 8:43:24 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

1536:6AXA+BD+/meCL01WoSW6Z2nkgM0mUrFZ0:s4DqmdL01WDkkgM0mcFO

Entry address:

0x1386C

Entry point:

48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 7E, F7, FF, FF, CC, CC, CC, CC, CC, CC, 5B, 41, 41, 46, 73, 5D, 20, 46, 61, 69, 6C, 65, 64, 20, 74, 6F, 20, 61, 6C, 6C, 6F, 63, 61, 74, 65, 20, 55, 4E, 49, 43, 4F, 44, 45, 5F, 53, 54, 52, 49, 4E, 47, 20, 66, 6F, 72, 20, 50, 61, 72, 61, 6D, 74, 65, 72, 73, 50, 61, 74, 68, 2C, 20, 73, 74, 61, 74, 75, 73, 20, 30, 78, 25, 78, 0A, 00, CC, CC, CC, CC, CC, CC, CC, 5C, 00, 50, 00, 61, 00, 72, 00, 61, 00, 6D, 00... 
[+]

Entropy:

6.3827

Code size:

61 KB (62,464 bytes)

Driver

Display name:

AAFsFlt

Description:

Rapid Recovery File System Filter Driver

Type:

File system 'filter' driver (FileSystemDriver)

Group:

FSFilter Continuous Backup

Depends on:

FltMgr AAVolFlt

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.