home

NseEngineDrv.sys

NSEnforcer

Initex

It runs as a Windows 64-bit kernel mode device driver named “NseEngineDrv Service”.
Publisher:
Initex  (signed and verified)

Product:
NSEnforcer

Description:
NSEnforcer Network Driver x64

Version:
1.25.0.1

MD5:
bd21732b45d58d65e8d714071fdb1f5d

SHA-1:
b290ad32affb40bdd09f970a1abf07385996501e

SHA-256:
ab466e59fdf9b47c8c46b418309b44e426c6cab7342fadd2a0bfa8c9956edb20

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:10:58 PM UTC  (today)

File size:
31.3 KB (32,000 bytes)

Product version:
1.25.0.1

Copyright:
Copyright © 2013-2015 Initex. All rights reserved.

Original file name:
NseEngineDrv.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\nseenginedrv.sys

Digital Signature
Signed by:
Initex

Authority:
COMODO CA Limited

Valid from:
4/8/2014 2:00:00 AM

Valid to:
4/8/2016 1:59:59 AM

Subject:
CN=Initex, O=Initex, STREET=Savushkina 17 A 10N, L=Saint Petersburg, S=Saint Petersburg, PostalCode=197183, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E92FB2EAEF08EEAB1A386A7B7C389089

File PE Metadata
Compilation timestamp:
12/28/2015 1:32:51 PM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
12.0

Entry address:
0x1658

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 93, 89, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, B2, FE, FF, FF, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, 05, C3, 49, 00, 00, 48, 8B, F9, 48, 8D, 0D, A1, 49, 00, 00, 48, 8D, 1D, AA, 49, 00, 00, 48, 3B, C1, 74, 45, 48, 3B, D8, 77, 40, 48, 8B, 43, 40, 48, 85, C0, 74, 18, 4C, 8B, 05, F8, 6B, 00, 00, 48, 8D, 0D, 33, 2D, 00, 00, 4C, 8B, CB, 48, 8B, D7, FF, D0, EB, 12, 48, 8B, 15, E0, 6B, 00, 00...
 
[+]

Entropy:
6.1847

Code size:
17 KB (17,408 bytes)

Driver
Display name:
NseEngineDrv Service

Service name:
NseEngineDrv

Type:
Kernel device driver (KernelDriver)

Group:
Extended Base


Scan NseEngineDrv.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.