checkndisport_df.exe
By ZTE CORPORATION (Signed)
Overview
checkndisport_df.exe has 3 known versions, the most recent one is 1.0.0.2. checkndisport_df.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 426.46 KB. It is an authenticode code-signed executable issued to ZTE CORPORATION by the certification authority VeriSign. The programs Turkcell VINN Hostless Modem, 3G Mobile Hotspot and Maxis Broadband Hostless Modem have been observed as installing specific variations of checkndisport_df.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 3 MB with the maximum memory reaching around 5.36 MB. Addionally, typically read and write I/O disk operations is about 140.37 KB per minute for reads and 36 Bytes per minute for writes.
 Details
|
| File name: | checkndisport_df.exe |
| Typical file path: | C:\Program Files\hostless modem\4g hostless modem\checkndisport_df.exe |
| Certificate |
| Issued to: | ZTE CORPORATION |
| Authority (CA): | VeriSign |
| Effective date: | Monday, September 3, 2012 |
Programs installed in
(Note, the programs listed below are for all versions of checkndisport_df.exe.)
Behaviors
(Note, the behaviors below are for all versions of checkndisport_df.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'CheckNDISPortf0acc8' → C:\Program Files\O2 4G Dongle\CheckNDISPort_df.exe
- 'CheckNDISPort_df' → C:\Program Files\Hostless Modem\4G Hostless Modem\CheckNDISPort_df.exe
All file variations of checkndisport_df.exe
