» mlx4_bus.sys
Overview
Analysis
File Details

mlx4_bus.sys

OpenFabrics Windows

Mellanox Technologies,LTD

File name:

mlx4_bus.sys

Publisher:

Mellanox (signed by Mellanox Technologies,LTD)

Product:

OpenFabrics Windows

Description:

MLX4 Bus Driver

Version:

2.1.0000.5593

MD5:

37a306265f2e9a9025fc0fa356a5b84c

SHA-1:

bb5ffda33f00aaf98ae0f772fb21352e19511f7a

SHA-256:

8269ece96b9b62222dc0d7d641f387ee5f3d5e3176663c394bafd0fd895ae731

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/16/2024 12:10:42 AM UTC (today)

File size:

170 KB (174,120 bytes)

Product version:

6.0.6001.18000

Original file name:

mlx4_bus.sys

File type:

Driver (Win32 SYS)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\dp_lan_others_14061\drp\mellanox\forced\5x86\mlx4_bus.sys

Digital Signature

Signed by:

Mellanox Technologies,LTD

Authority:

VeriSign, Inc.

Valid from:

2/2/2009 5:45:00 AM

Valid to:

2/16/2010 5:44:59 AM

Subject:

CN="Mellanox Technologies,LTD", OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Mellanox Technologies,LTD", L=Yokneam, S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5E6BBE5342266360867A7013D98AD463

File PE Metadata

Compilation timestamp:

2/14/2010 9:19:37 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

8.0

CTPH (ssdeep):

3072:MNeqpKo610vqmcisdo3sU+A3hSp06IMDaUVOsAk2:Mg/oMHhd9U9hkUUVOsAt

Entry address:

0x82A4

Entry point:

8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 85, DB, 75, 0E, FF, 75, 0C, 53, E8, CB, D6, 01, 00, E9, BE, 00, 00, 00, 66, 83, 25, C8, 15, 03, 00, 00, 56, FF, 75, 0C, BE, C8, 15, 03, 00, 56, 89, 1D, DC, 15, 03, 00, 66, C7, 05, CA, 15, 03, 00, 08, 02, C7, 05, CC, 15, 03, 00, E0, 15, 03, 00, FF, 15, E4, F3, 02, 00, 68, D8, 15, 03, 00, 68, C0, 0D, 03, 00, 56, 53, E8, 23, 2D, 01, 00, 85, C0, 7C, 77, 57, 8B, 3D, E8, 17, 03, 00, EB, 0E, 56, 53, FF, 57, 08, 85, C0, 89, 45, 08, 7C, 1B, 8B, 3F, 85, FF, 75, EE, E8, 62, 00, 00... 
[+]

Entropy:

6.2066

Code size:

128.4 KB (131,456 bytes)

Scan mlx4_bus.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.