home

isdncapi.sys

Billion ISDN Driver

Billion Electric Co., Ltd.

It runs as a Windows kernel mode device driver named “ISDN CAPI Protocol”.
Publisher:
Billion Electric Co., Ltd.  (signed and verified)

Product:
Billion ISDN Driver

Description:
CAPI ISDN Protocol Driver (x86)

Version:
5.0.0.0

MD5:
a0b43fddb1ab086c6b19e8737a941299

SHA-1:
f7cc115b4a687b2abac53fedc84ab3e2d6ea8a03

SHA-256:
b788b8b901094aa2ce2d18845224f8b2b6cda9d1bc98b0b628c9947ce76eaf69

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 6:39:13 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Nonim
1.3.0.4261

File size:
499.6 KB (511,568 bytes)

Product version:
5.0.0.0

Copyright:
Copyright (c) 2006-2007 Billion

Original file name:
isdncapi.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\isdncapi.sys

Digital Signature
Signed by:
Billion Electric Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/19/2006 4:00:00 AM

Valid to:
5/20/2007 3:59:59 AM

Subject:
CN="Billion Electric Co., Ltd.", OU=R&D, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Billion Electric Co., Ltd.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
020EF9F59731A98143C62075C3B5C212

File PE Metadata
Compilation timestamp:
2/12/2007 10:29:36 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
12288:Bg5gN2LL8aI6TkX//n8fYqqIRnF+ojcLU9/d/YmaA:Bg5xL8McR8/9YmT

Entry address:
0x77300

Entry point:
8B, FF, 55, 8B, EC, 51, E8, 75, E7, F8, FF, 89, 45, FC, 8B, 45, FC, C1, E8, 1E, 83, F8, 03, 75, 0D, E8, B2, E7, F8, FF, 8B, 45, FC, E9, B1, 00, 00, 00, 8B, 4D, 08, C7, 41, 34, F0, 0B, 07, 00, 8B, 55, 08, C7, 42, 38, 40, 0B, 07, 00, 8B, 45, 08, C7, 40, 40, 40, 0B, 07, 00, 8B, 4D, 08, C7, 41, 44, 40, 0B, 07, 00, 8B, 55, 08, C7, 42, 48, 40, 0B, 07, 00, 8B, 45, 08, C7, 40, 70, 40, 0B, 07, 00, 8B, 4D, 08, C7, 41, 74, 40, 0B, 07, 00, 8B, 55, 08, C7, 82, 80, 00, 00, 00, 40, 0B, 07, 00, C6, 05, 0C, 37, 08, 00, 00...
 
[+]

Entropy:
6.2251

Code size:
457.4 KB (468,352 bytes)

Driver
Display name:
ISDN CAPI Protocol

Service name:
isdncapi

Type:
Kernel device driver (KernelDriver)

Group:
Extended base


Scan isdncapi.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.