Nanjing Ranyi Technology Co., Ltd. is a Chinese company whose digital certificate was used to sign the malicious msagent.sys driver. The certificate was valid from August 2013 to September 2014, and older malicious drivers signed with the same certificate have been identified.