Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, ZTE CORPORATION publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
checkndisport_df.exe
By ZTE CORPORATION (Signed)
Version: | 1.0.0.2 |
MD5: | 0cff682d381ef363c2d408db4db8e14f |
SHA1: | 95cad204aa1074267b039d84716ad0b3a64e032d |
SHA256: | 61ea5a013625af7623f7369ede3ccba8f4115ef98194877d7efbb04cf4143af0 |
Overview
checkndisport_df.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Turkcell VINN Hostless Modem published by ZTE Corporation and 3G Mobile Hotspot published by ZTE Corporation. The file is digitally signed by ZTE CORPORATION which was issued by the VeriSign certificate authority (CA).
Details
File name: | checkndisport_df.exe |
Typical file path: | C:\Program Files\hostless modem\4g hostless modem\checkndisport_df.exe |
File version: | 1.0.0.2 |
Size: | 432.32 KB (442,696 bytes) |
Build date: | 10/10/2012 12:53 PM |
Certificate |
Issued to: | ZTE CORPORATION |
Authority (CA): | VeriSign |
Effective date: | Monday, September 3, 2012 |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following programs will install this file
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'CheckNDISPortf0acc8' → C:\Program Files\O2 4G Dongle\CheckNDISPort_df.exe
- 'CheckNDISPort_df' → C:\Program Files\Hostless Modem\4G Hostless Modem\CheckNDISPort_df.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.01876193% | |
Kernel CPU: | 0.01112996% | |
User CPU: | 0.00763196% | |
Kernel CPU time: | 13,846,334 ms/min | |
Context switches: | 184/sec | |
Memory |
Private memory: | 2.33 MB | |
Private (maximum): | 5.48 MB | |
Private (minimum): | 5.32 MB | |
Non-paged memory: | 2.33 MB | |
Virtual memory: | 59.89 MB | |
Virtual memory (peak): | 63.47 MB | |
Working set: | 5.48 MB | |
Working set (peak): | 5.49 MB | |
Resource allocations |
Threads: | 1 | |
Handles: | 88 | |
GUI GDI count: | 21 | |
GUI GDI peak: | 19 | |
GUI USER count: | 12 | |
GUI USER peak: | 15 | |
Process properties
Integrety level: | Undefined |
Platform: | 32-bit |
Command lines: |
- "C:\Program Files\hostless modem\turkcell vinn\checkndisport_df.exe"
- "C:\Program Files\hostless modem\4g hostless modem\checkndisport_df.exe"
|
Owner: | User |
Parent process: | Explorer.EXE (by Microsoft) |
Distribution by Windows OS
OS version | distribution |
Microsoft Windows XP |
50.00% |
|
Windows 8.1 |
25.00% |
|
Windows 7 Home Premium |
25.00% |
|
Distribution by country
United Kingdom installs about 25.00% of checkndisport_df.exe.
Distribution by PC manufacturer
PC Manufacturer | distribution |
GIGABYTE |
50.00% |
|
Alienware |
25.00% |
|
Hewlett-Packard |
25.00% |
|