home

imdsksvc.exe

imdisk

Lagerkvist Teknisk Radgivning i Boras HB

It runs as a separate (within the context of its own process) windows Service named “ImDisk Virtual Disk Driver Helper”.
Publisher:
Olof Lagerkvist  (signed by Lagerkvist Teknisk Radgivning i Boras HB)

Product:
imdisk

Description:
ImDisk Virtual Disk Driver helper service

Version:
1.9.2.23

MD5:
486224aa169e74e52463201cf76c9a61

SHA-1:
aff347558c29f092e90885c2aa344f2121498497

SHA-256:
1aed6347fc33022d8a51a4edb60efc429fe004910622c8ce697dbbfc52c17359

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 8:11:11 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win64:Evo-gen [Susp]
2014.9-160214

File size:
16.1 KB (16,480 bytes)

Product version:
1.9.2.23

Copyright:
Copyright © 2005-2014 Olof Lagerkvist.

Original file name:
imdsksvc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\imdsksvc.exe

Digital Signature
Signed by:
Lagerkvist Teknisk Radgivning i Boras HB

Authority:
GlobalSign nv-sa

Valid from:
1/17/2013 9:00:08 PM

Valid to:
3/18/2016 6:13:37 PM

Subject:
E=info@ltr-data.se, CN=Lagerkvist Teknisk Radgivning i Boras HB, O=Lagerkvist Teknisk Radgivning i Boras HB, S=-, C=SE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112142A12C757CEC8872B6E203ECD4EA6491

File PE Metadata
Compilation timestamp:
12/17/2014 6:37:09 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
384:xTIMP/aAElwWDzhtFDKjMCm+YjdUb+TIh1Ll:xUMP//+tFDXUPi2Ll

Entry address:
0x1DD0

Entry point:
8B, FF, 55, 8B, EC, 81, EC, A0, 01, 00, 00, 8D, 85, 60, FE, FF, FF, 50, 68, 01, 01, 00, 00, E8, C0, 07, 00, 00, 6A, 00, 6A, 00, 6A, 01, 6A, 00, C7, 45, F0, 5C, 11, 00, 01, C7, 45, F4, 70, 1C, 00, 01, C7, 45, F8, 00, 00, 00, 00, C7, 45, FC, 00, 00, 00, 00, FF, 15, 1C, 10, 00, 01, 85, C0, A3, 30, 33, 00, 01, 75, 07, 50, FF, 15, 68, 10, 00, 01, 8D, 4D, F0, 51, FF, 15, 04, 10, 00, 01, 85, C0, 75, 1E, 68, 10, 20, 00, 00, 68, A4, 11, 00, 01, 68, 70, 11, 00, 01, 50, FF, 15, 84, 10, 00, 01, 6A, 00, FF, 15, 68, 10...
 
[+]

Entropy:
6.5599

Code size:
7 KB (7,168 bytes)

Service
Display name:
ImDisk Virtual Disk Driver Helper

Service name:
ImDskSvc

Description:
Helper service for ImDisk Virtual Disk Driver.

Type:
Win32OwnProcess


Scan imdsksvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.