home

ultra.sys

Promise Ultra Series Driver

Promise.com

It runs as a Windows kernel mode device driver named “Ultra”.
Publisher:
Promise Technology, Inc.  (signed by Promise.com)

Product:
Promise Ultra Series Driver

Description:
Promise Ultra Series Driver for Windows

Version:
2.1.0.3

MD5:
fdbb6ba2585b267e1e2683e7d3ee330e

SHA-1:
a6fe315aa01c577694aaba5757954e014931bc27

SHA-256:
79aec0b0dce0fd2b0e04ab773e373e16d008a63da1f2a54904262bb7415dc2b0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:17:37 PM UTC  (today)

File size:
32.9 KB (33,688 bytes)

Product version:
2.1.0.3

Copyright:
© 1988-2002 Promise Technology, Inc.

Trademarks:
Ultra33/66/100/133/TX2 (tm)

Original file name:
ultra.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\ultra.sys

Digital Signature
Signed by:
Promise.com

Authority:
Promise.com

Valid from:
3/13/2007 7:59:10 AM

Valid to:
12/31/2039 6:59:59 PM

Subject:
CN=Promise.com

Issuer:
CN=Promise.com

Serial number:
B4D88AA8677A97AC4EF39613A89E3B52

File PE Metadata
Compilation timestamp:
7/28/2006 12:01:28 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
768:GlS3TBAZSk8/nKuQyIiDNLk0JtMJtM9P0L3R:G+ISp/dBIwttR0l

Entry address:
0x9005

Entry point:
8B, FF, 55, 8B, EC, A1, B8, 80, 01, 00, 85, C0, B9, 40, BB, 00, 00, 74, 04, 3B, C1, 75, 23, 8B, 15, 64, 70, 01, 00, B8, B8, 80, 01, 00, C1, E8, 08, 33, 02, 25, FF, FF, 00, 00, A3, B8, 80, 01, 00, 75, 07, 8B, C1, A3, B8, 80, 01, 00, F7, D0, A3, BC, 80, 01, 00, 5D, E9, D4, D9, FF, FF, E8, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 9E, 91, 00, 00, 60, 70, 00, 00, 88, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 2A, 94, 00, 00, 00, 70, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4369

Code size:
25 KB (25,600 bytes)

Driver
Display name:
Ultra

Type:
Kernel device driver (KernelDriver)

Group:
SCSI Miniport


Scan ultra.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.