home

RAMDriv.sys

RAMDisk Enterprise

Christiaan Ghijselinck

Publisher:
DConPlus. Co. Ltd.  (signed by Christiaan Ghijselinck)

Product:
RAMDisk Enterprise

Description:
RAMDisk Driver (x86)

Version:
5,3,1,9 Mon Dec 24 11:11:55 2007

MD5:
506d77aab481d57255983e7f224a430b

SHA-1:
ceb63794e5eea639554982e81beb4b2c0f8ade69

SHA-256:
d018496a2e3a811c791d4377715e8e091453b73c3184401e6bad17c8803400ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:05:08 AM UTC  (today)

File size:
59.1 KB (60,488 bytes)

Product version:
5,3,1,9

Copyright:
Copyright (C) DConPlus. Co. Ltd.

Original file name:
RAMDriv.sys

File type:
Driver (Win32 SYS)

Common path:
C:\Program Files\kica\mobilekey\ramdriv.sys

Digital Signature
Signed by:
Christiaan Ghijselinck

Authority:
GlobalSign nv-sa

Valid from:
5/1/2007 3:26:42 AM

Valid to:
5/1/2008 3:26:42 AM

Subject:
E=Christiaan.Ghijselinck@Skynet.be, CN=Christiaan Ghijselinck, C=BE

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011243BE9322

File PE Metadata
Compilation timestamp:
12/24/2007 7:12:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.0

CTPH (ssdeep):
768:208VGkkRMYaMYRhk25VN4YjeP2quayPBolff/5+Z4x7/aXbNDy/Dq3+GLYIHXJiP:20OG5R1k432wfX5+Z4parNW/eTHZiP

Entry address:
0xBC00

Entry point:
55, 8B, EC, 81, EC, 1C, 01, 00, 00, 53, 56, 8B, 75, 08, 8D, 45, 08, 50, 6A, 18, 68, 00, BC, 01, 00, 56, C7, 05, 50, 79, 01, 00, 04, 4C, 01, 00, FF, 15, 44, 5B, 01, 00, 33, DB, 3B, C3, 0F, 8C, 17, 01, 00, 00, 8B, 4D, 08, 57, 8B, 7D, 0C, 66, 8B, 07, 66, 89, 01, 66, 8B, 47, 02, 8B, 4D, 08, 66, 05, 02, 00, 66, 89, 41, 02, 8B, 45, 08, 0F, B7, 40, 02, 68, 52, 41, 4D, 30, 50, 53, FF, 15, 30, 5B, 01, 00, 8B, 4D, 08, 89, 41, 04, 8B, 45, 08, 39, 58, 04, 75, 0A, B8, 9A, 00, 00, C0, E9, CE, 00, 00, 00, 57, 50, FF, 15...
 
[+]

Entropy:
6.6518

Developed / compiled with:
Microsoft Visual C++

Code size:
41.1 KB (42,112 bytes)

Scan RAMDriv.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.