home

Cwmem2k.SYS

CardWare

APSoft

It runs as a Windows kernel mode device driver named “CardWare Memory Cards Support for Windows”.
Publisher:
APSoft  (signed and verified)

Product:
CardWare

Description:
Memory card driver for Windows

Version:
7.00.028

MD5:
c04a5f4a3eb6849802d0466409c50b06

SHA-1:
064ae6fe7280f57cf71797d00abb5240596ca21c

SHA-256:
076b566f98585b52af13001d6a28bc0b4886eda9c3a14b317154a365179dd2df

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 4:38:30 PM UTC  (today)

File size:
516.8 KB (529,248 bytes)

Product version:
7.00.028

Copyright:
Copyright © APSoft, 1992 - 2016. All rights reserved. Disassembly or decompilation prohibited.

Original file name:
Cwmem2k.SYS

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\cwmem2k.sys

Digital Signature
Signed by:
APSoft

Authority:
Symantec Corporation

Valid from:
8/14/2015 1:00:00 AM

Valid to:
9/13/2016 12:59:59 AM

Subject:
CN=APSoft, O=APSoft, L=Reichertsheim, S=Bayern, C=DE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
5222E04E0A39D793E13EDD98A2AE032F

File PE Metadata
Compilation timestamp:
1/11/2016 8:29:38 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
6.0

CTPH (ssdeep):
12288:FB0kxjtdXDWSaapSh+bmDU81DDwsnrTXQM7G:FB5j3XDWIpSh+STDws/XRG

Entry address:
0x35C0F

Entry point:
55, 8B, EC, 81, EC, 34, 01, 00, 00, 56, 57, 8D, 85, CC, FE, FF, FF, 33, FF, 6A, FF, 68, 60, E8, 02, 00, 8D, 4D, CC, A3, 08, 63, 03, 00, 89, 7D, FC, E8, 53, C2, FD, FF, 8D, 45, FC, 8B, 75, 08, 50, 8D, 45, CC, F7, D8, 1B, C0, 8D, 4D, D0, 57, 57, 23, C1, 6A, 22, 50, 57, 56, FF, 15, 88, D9, 02, 00, 8B, 4D, FC, 3B, C7, 89, 0D, 00, 63, 03, 00, 7D, 07, 8B, F0, E9, 10, 03, 00, 00, 6A, 10, 89, 35, FC, 62, 03, 00, E8, 65, BC, FD, FF, 8B, 75, 0C, 3B, C7, 59, 74, 0A, 56, 8B, C8, E8, 48, C2, FD, FF, EB, 02, 33, C0, 3B...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
124.6 KB (127,616 bytes)

Driver
Display name:
CardWare Memory Cards Support for Windows

Service name:
CWMEM2K

Type:
Kernel device driver (KernelDriver)

Group:
System Bus Extender

Depends on:
PCCS


Scan Cwmem2k.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.