home

cbfs3.sys

Callback File System

EldoS Corporation

It runs as a Windows 64-bit kernel mode device driver named “EldoS Callback File System driver v3”.
Publisher:
EldoS Corporation  (signed and verified)

Product:
Callback File System (TM)

Description:
Callback File System Driver

Version:
3, 2, 113, 289

MD5:
8dc601ee4cb34f3df446fe9bc61a99c3

SHA-1:
3dce2d90ff4691c9a08f9414d5786c3f9f470de8

SHA-256:
c4dda3d99fc8e6aa9f3bcde760dd6ba80c786bf2ed721741b19f6d85d21d21e3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 2:27:09 AM UTC  (today)

File size:
344.2 KB (352,456 bytes)

Product version:
3, 2, 113, 14

Copyright:
Copyright (C) EldoS Corp. 2006-2012

Original file name:
cbfs3.sys

File type:
Driver (Win64 SYS)

Common path:
C:\Windows\System32\drivers\cbfs3.sys

Digital Signature
Signed by:
EldoS Corporation

Authority:
GlobalSign nv-sa

Valid from:
1/11/2010 3:19:26 PM

Valid to:
1/11/2013 3:19:23 PM

Subject:
E=info@eldos.com, CN=EldoS Corporation, O=EldoS Corporation, C=VG

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001261DEC28F7

File PE Metadata
Compilation timestamp:
7/27/2012 4:35:36 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
6144:EwZAMIjD0deKf/bqjNnj3r+ZGXl1DAJYn0jct1XayT5a:Ec9MVx3iZwpyctRa6a

Entry address:
0x5506C

Entry point:
48, 83, EC, 28, 4C, 8B, C2, 4C, 8B, C9, E8, 95, FF, FF, FF, 49, 8B, D0, 49, 8B, C9, 48, 83, C4, 28, E9, 7E, EF, FF, FF, CC, CC, CC, CC, CC, CC, 5C, 00, 44, 00, 65, 00, 76, 00, 69, 00, 63, 00, 65, 00, 5C, 00, 43, 00, 62, 00, 46, 00, 73, 00, 33, 00, 00, 00, CC, CC, CC, CC, 5C, 00, 44, 00, 6F, 00, 73, 00, 44, 00, 65, 00, 76, 00, 69, 00, 63, 00, 65, 00, 73, 00, 5C, 00, 43, 00, 62, 00, 46, 00, 73, 00, 33, 00, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 46, 00, 73, 00, 52, 00, 74, 00, 6C, 00, 52, 00...
 
[+]

Code size:
258 KB (264,192 bytes)

Driver
Display name:
EldoS Callback File System driver v3

Service name:
cbfs3

Type:
Kernel device driver (KernelDriver)


Scan cbfs3.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.