» EKAARUSB_WIN7.SYS
Overview
Analysis
File Details

EKAARUSB_WIN7.SYS

Driver for Atheros OTUS Network Adapter

Ekahau Inc.

File name:

EKAARUSB_WIN7.SYS

Publisher:

Ekahau Inc. (signed and verified)

Product:

Driver for Atheros OTUS Network Adapter

Description:

Ekahau Site Survey Wireless USB device driver

Version:

3.0.1.728 built by: WinDDK

MD5:

14afc815e9867f665ba19b30acb5f69c

SHA-1:

1e5cc3dc3e1e603c7662705f681622aeb26d332a

SHA-256:

c47d531a9f86d45441332dcdc8028f63b69a59db61d32009f75ed6e0576e04de

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/5/2025 3:37:15 AM UTC (today)

File size:

654.6 KB (670,272 bytes)

Product version:

3.0.1.728

Original file name:

EKAARUSB_WIN7.SYS

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\Program Files\ekahau\ekahau site survey\drivers\usb\ekaarusb_win7.sys

Digital Signature

Signed by:

Ekahau Inc.

Authority:

GlobalSign nv-sa

Valid from:

7/15/2014 7:21:27 PM

Valid to:

7/7/2016 5:50:24 PM

Subject:

CN=Ekahau Inc., OU=Ekahau Inc., O=Ekahau Inc., L=Helsinki, S=Uusimaa, C=FI

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121C9B2DE0358D53F750781B17362E87ADB

File PE Metadata

Compilation timestamp:

7/18/2014 3:08:39 PM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

6144:R5/GRiUKliwklI/Pd9zC0Xz0PVbVUJomYeL0M8CfL3jFPLsVNOU+aTJbSpEg:R5/yKt/V9ztzyNDmYe3DOib

Entry address:

0x1D744

Entry point:

8B, FF, 55, 8B, EC, E8, B7, 78, 0A, 00, 5D, E9, 1A, FF, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 56, BE, 30, EB, 0A, 00, 57, 8B, CE, BF, 30, EB, 0A, 00, 33, C0, 3B, CF, 73, 3C, 83, 3E, 2C, 75, 32, 8B, 46, 20, 56, FF, 35, 94, F2, 0A, 00, 89, 35, 34, EB, 0A, 00, FF, 75, 08, 85, C0, 74, 09, 68, 60, 69, 08, 00, FF, D0, EB, 05, E8, C4, 91, 05, 00, 85, C0, 7C, 0E, 83, C6, 2C, 3B, F7, 72, CB, EB, 05, B8, 04, 00, 00, C0, 5F, 5E, 5D, C2, 04, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, A1, 34, EB, 0A, 00, B9... 
[+]

Entropy:

6.3549

Code size:

495 KB (506,880 bytes)

Scan EKAARUSB_WIN7.SYS - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.