MRXSMB20.Sys

Longhorn SMB 2.0 Redirector

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Longhorn SMB 2.0 Redirector

 
Part of the Windows Operating System

Version:
6.3.9600.17195 (winblue_gdr.140530-1506)

MD5:
5c42cee3e2018e1dfc6e3e17240a432a

SHA-1:
a4f12b83762bd7915fc28fc299222027694f77ac

SHA-256:
7dff61686167535125ba376a9be3dd1c2ac7a2c13455e0fd8e83aae88e52f987

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/6/2016 9:01:36 PM UTC  (today)

File size:
202 KB (206,848 bytes)

Product version:
6.3.9600.17195

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MRXSMB20.Sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\mrxsmb20.sys

File PE Metadata
Compilation timestamp:
5/31/2014 8:27:45 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
3072:EKivfII6Hp8UdBNplsnm7HQ8nMjR/doIWs83RUAuShVdp4SqBtrDSuRisxJbZ6c:EJfIRXxlzSRFoIWs6zr86MnZ

Entry address:
0x14F70

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 7B, 00, 02, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, 8A, F1, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 49, 90, 01, 00, 75, 10, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 01, C3, 48, C1, C9, 10, E9, 02, 00, 00, 00, CC, CC, B9, 02, 00, 00, 00, CD, 29, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 72, 33, 01, 00, CC, CC, 48, 83, EC, 28, 4D, 8B, 41, 38...
 
[+]

Code size:
167 KB (171,008 bytes)