MRXSMB20.Sys

Longhorn SMB 2.0 Redirector

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Longhorn SMB 2.0 Redirector

 
Part of the Windows Operating System

Version:
6.3.9600.17111 (winblue_gdr.140429-1523)

MD5:
b47ff2a27996d38a443e15adb6b445e5

SHA-1:
1787adb523e5b6777f746981997698ded25170e9

SHA-256:
d272ce39bf993edefb2404ec8b37c804df4774e4ca8637850a3250615500c019

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/6/2016 3:12:32 PM UTC  (today)

File size:
202 KB (206,848 bytes)

Product version:
6.3.9600.17111

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MRXSMB20.Sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\mrxsmb20.sys

File PE Metadata
Compilation timestamp:
4/30/2014 8:43:20 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
3072:QKivfII6H7ULCXoqP6kBbrkd28jRtdoIWsQngPnMN4F4FB2H4htrDCuRisL5yS6O:QJfIDoC4eDCRXoIWsbMuFM2aqMn5yS

Entry address:
0x14F70

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 7B, 00, 02, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, 8A, F1, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 49, 90, 01, 00, 75, 10, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 01, C3, 48, C1, C9, 10, E9, 02, 00, 00, 00, CC, CC, B9, 02, 00, 00, 00, CD, 29, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 72, 33, 01, 00, CC, CC, 48, 83, EC, 28, 4D, 8B, 41, 38...
 
[+]

Entropy:
6.1964

Code size:
167 KB (171,008 bytes)