home

mcdbus.sys

MagicISO SCSI Host Controller

JiaPing Gan

It runs as a Windows 64-bit kernel mode device driver named “Driver for MagicISO SCSI Host Controller”.
Publisher:
MagicISO, Inc.  (signed by JiaPing Gan)

Product:
MagicISO SCSI Host Controller

Version:
2.7.105.132

MD5:
2757f2e17c452e24682eb0ccea74997d

SHA-1:
e56da06db64c5c3df579b37975d05cd3f90dfc7e

SHA-256:
557e49e48fb11090bbe8dd84c207adde50d941e4b0db49b752dda539f4146ff2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:55:43 PM UTC  (a few moments ago)

File size:
249.4 KB (255,424 bytes)

Product version:
2.7.105.132

Copyright:
Copyright (c) 2001-2008 MagicISO, Inc. All rights reserved.

Original file name:
mcdbus.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\mcdbus.sys

Digital Signature
Signed by:
JiaPing Gan

Authority:
GlobalSign nv-sa

Valid from:
8/13/2007 11:01:03 AM

Valid to:
8/13/2009 11:01:03 AM

Subject:
E=gjpland@magiciso.com, CN=JiaPing Gan, C=CN

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001145EAB6079

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:ckTBfoPfFLX7uH1aBA5KxMwUNBxZ6sV8YewVffPfI6jcIOQO7qyovvEbaWnyh+D0:7TBgPfC17Kxu7pVffPfI6jDhRgAYZJ

Entry point:
01, EB, 6B, B2, 20, B1, 01, FF, 15, 47, 2A, FE, FF, 0F, B6, C0, 85, C0, 74, 0B, 66, C7, 05, D3, CF, 01, 00, 20, 01, EB, 4F, B2, 10, B1, 01, FF, 15, 2B, 2A, FE, FF, 0F, B6, C0, 85, C0, 74, 0B, 66, C7, 05, B7, CF, 01, 00, 10, 01, EB, 33, B2, 05, B1, 01, FF, 15, 0F, 2A, FE, FF, 0F, B6, C0, 85, C0, 74, 12, 66, C7, 05, 9B, CF, 01, 00, 05, 01, C6, 05, 96, CF, 01, 00, 01, EB, 10, 66, C7, 05, 89, CF, 01, 00, 00, 01, C6, 05, 84, CF, 01, 00, 01, 0F, B6, 05, 7D, CF, 01, 00, 85, C0, 75, 7A, 48, 8B, 84, 24, A8, 00, 00...
 
[+]

Entropy:
5.8451

Driver
Display name:
Driver for MagicISO SCSI Host Controller

Service name:
mcdbus

Type:
Kernel device driver (KernelDriver)

Group:
Extended Base


Scan mcdbus.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.