home

ndis.sys

NDIS 6.20 driver

Microsoft Corporation

The Network Driver Interface Specification (NDIS) library provides the ability for network interface cards (NICs) to function by maintaining state information and parameters for network drivers as well as specifies a standard interface between layered network drivers. It runs as a Windows kernel mode device driver named “NDIS System Driver”. It is included with the Windows 7 OS.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
NDIS 6.20 driver

 
Part of the Windows 7 Operating System

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
c3ee121cafea23e97742c96914051ca4

SHA-1:
6a4f7a40029eebb3b083cd0b4e3be191574cee11

SHA-256:
42d03ec52906c8cd8cfb4263b635c682a122a432a2a61386d41d19f28f74199d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 1:01:36 PM UTC  (today)

File size:
695.4 KB (712,064 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
NDIS.SYS.MUI

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\ndis.sys

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 1:57:40 PM

Valid to:
3/7/2011 1:57:40 PM

Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6115230F00000000000A

File PE Metadata
Compilation timestamp:
12/17/2010 9:47:49 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
12288:cu2TIHspr0MvP5onzTRTCR6OEGs86fuqlEDXJj6ZvPWyj6zZ2dAT0xA4X9fk0vuh:cuPHspr0MvP5onzTRTU6OEGs/fuqWyjO

Entry address:
0x98674

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, 90, 90, 90, 90, 90, 8B, FF, 55, 8B, EC, 81, EC, 30, 01, 00, 00, A1, 10, 1E, 05, 00, 33, C5, 89, 45, FC, 53, 8B, 5D, 08, 56, 57, 8B, 7D, 0C, 68, C0, 37, 05, 00, 89, 5D, D4, E8, 7F, 4F, F8, FF, E8, CA, 1E, FB, FF, 57, 33, F6, 53, 89, 35, D8, 37, 05, 00, E8, 99, 1F, FB, FF, 68, A8, 1F, 05, 00, 68, B0, 1F, 05, 00, 68, 70, D8, 02, 00, BB, 84, F5, 04, 00, 53, E8, EA, 51, F8, FF, 56, 53, E8, 3D, 51, F8, FF, 33, DB, 43, 53, 6A, FF, 6A, 78, FF, 15, 70, F1, 04, 00, 33, C0...
 
[+]

Entropy:
6.4864

Code size:
550.5 KB (563,712 bytes)

Driver
Display name:
NDIS System Driver

Service name:
NDIS

Type:
Kernel device driver (KernelDriver)

Group:
NDIS Wrapper


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.