home

NcBulk.SYS

PLX USB interface controllers

PLX Technology, Inc.

It runs as a Windows kernel mode device driver named “NcBulk”.
Publisher:
PLX Technology, Inc. (visit www.PlxTech.com)  (signed by PLX Technology, Inc.)

Product:
PLX USB interface controllers

Description:
USB interface module between user-mode and MS-USBD (x86)

Version:
04.08.02.14 (x86)

MD5:
1c1cbcc2165142c79dcfa3e0ab29601b

SHA-1:
dbd5dbe8fb603afca59aa1de9050bdd11139ed6f

SHA-256:
419bb8d48f746fb6a635e806d3512823e593bf547bbf1514a501ddb7b4c5f9d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:40:11 AM UTC  (today)

File size:
20.4 KB (20,936 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2005 PLX Technology, Inc.

Original file name:
NcBulk.SYS

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\ncbulk.sys

Digital Signature
Signed by:
PLX Technology, Inc.

Authority:
GlobalSign nv-sa

Valid from:
4/8/2011 4:03:39 PM

Valid to:
4/8/2014 4:03:36 PM

Subject:
CN="PLX Technology, Inc.", OU=Software Engineering, O="PLX Technology, Inc.", L=Sunnyvale, S=CA, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012F3731131C

File PE Metadata
Compilation timestamp:
2/14/2008 11:47:18 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
8.0

CTPH (ssdeep):
384:S64dRTxWJYN4ftfqzUP8WQaTqqe9AfSiLSmuYJLdtNfZfdUb+e/a7S:S64d2qKftfqM83aGMK6Sm3LmieuS

Entry address:
0x2685

Entry point:
8B, FF, 55, 8B, EC, A1, 0C, 26, 01, 00, 85, C0, B9, 4E, E6, 40, BB, 74, 04, 3B, C1, 75, 1A, A1, EC, 23, 01, 00, 8B, 00, 35, 0C, 26, 01, 00, A3, 0C, 26, 01, 00, 75, 07, 8B, C1, A3, 0C, 26, 01, 00, F7, D0, A3, 10, 26, 01, 00, 5D, E9, C3, FB, FF, FF, CC, 78, 27, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 24, 2A, 00, 00, D0, 23, 00, 00, 28, 27, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4E, 2A, 00, 00, 80, 23, 00, 00, 68, 27, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 2A, 00, 00, C0, 23, 00, 00, 34, 27, 00, 00, 00...
 
[+]

Entropy:
6.7483

Code size:
9.1 KB (9,344 bytes)

Driver
Display name:
NcBulk

Type:
Kernel device driver (KernelDriver)


Scan NcBulk.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.