f8e36b68eed9680291610c83e7df16a04d278e3e7bc807cf8a870d01c4e5a95e

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_NATIVE
Compilation Date 2009-Jun-05 10:41:49
Detected languages English - United States
Debug artifacts c:\views\cysuiteusb_build_view\software\products\hsusb\cysuiteusb\cyusb_sys\src\objfre_wlh_amd64\amd64\cyusb.pdb
CompanyName Cypress Semiconductor
FileDescription Cypress Generic USB Device Driver-Release 3.4
FileVersion 3.04.0001.20 built by: WinDDK
InternalName CyUsb.sys
LegalCopyright Copyright(C) Cypress Semiconductor 2004-2009
OriginalFilename CyUsb.sys
ProductName Cypress Generic USB Device Driver-Release 3.4
ProductVersion 3.04.0001.20

Plugin Output

Suspicious The PE is possibly packed. Unusual section name found: PAGE
Section INIT is both writable and executable.
Suspicious The PE contains functions most legitimate programs don't use. Uses Windows's Native API:
  • ZwReadFile
  • ZwCreateFile
  • ZwClose
  • ZwQueryInformationFile
Safe VirusTotal score: 0/71 (Scanned on 2026-09-13 16:40:20) All the AVs think this file is safe.

Hashes

MD5 8ec96b753727b380089d66d4ab5869df 🔍
SHA1 14c8697ac2813fbf265211f1583d442e54e792b2 🔍
SHA256 f8e36b68eed9680291610c83e7df16a04d278e3e7bc807cf8a870d01c4e5a95e 🔍
SHA3 9ad5a89bc04d368611cd5f164b1091ebbc53bb337b37b83911bcf0c30efecbbf 🔍
SSDeep 768:Axs4aNRYfxtHzh58h3EBeJBd4VzOYFusnPv08qNhjJLqYUGC8wn+uMzMsGG2:AygBeJ34hkJu+uMzMsGG2 🔍
Imports Hash c4c0060ccd6527ef2d27c8d02f349fb8 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xd8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 8
TimeDateStamp 2009-Jun-05 10:41:49
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 8.0
SizeOfCode 0x9400
SizeOfInitializedData 0x2400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000E324 (Section: INIT)
BaseOfCode 0x1000
ImageBase 0x10000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 6.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x11000
SizeOfHeaders 0x400
Checksum 0xd1e6
Subsystem IMAGE_SUBSYSTEM_NATIVE
SizeofStackReserve 0x40000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 94cd39e86d2ae0f827ab24334fc192f4 🔍
SHA1 18a3af273d360fc27e7f69ea9d528e8412e4f2a8 🔍
SHA256 75758587e0a3a615e601b31049a208833c4887877f6c79987b4d72e8b3fa7b71 🔍
SHA3 77e41fd852cce02c88517a58b00411aee3a847b802aaae6a5903bb00d75d9157 🔍
VirtualSize 0x84ce
VirtualAddress 0x1000
SizeOfRawData 0x8600
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
Entropy 6.26123

.rdata

MD5 1509a74f4a4403d54e14a0f2e81d090c 🔍
SHA1 46456cc86fdb5757155fa62d077b4b1051fe5579 🔍
SHA256 1c855bba6a59d128460f05fe1807679f6726a1100aa220bbdd3590a1a8b39fe5 🔍
SHA3 9568e793aac979ad045fa9b1f538598901c426aacd554445addc7053c7f1b8c2 🔍
VirtualSize 0xafc
VirtualAddress 0xa000
SizeOfRawData 0xc00
PointerToRawData 0x8a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
Entropy 5.03182

.data

MD5 6bf74ce9913ba0b13fc43f6763744236 🔍
SHA1 6ff6712b12c480a762e77bbb18d78bb1d85415fe 🔍
SHA256 d470a34ea5d603a01e5ee0e98f96d92f85159d8731952af06f1d2d2eee249cb8 🔍
SHA3 539579d84d835e65e224876239a4f1a811d88f61330c233017ca21e991408a72 🔍
VirtualSize 0x6f8
VirtualAddress 0xb000
SizeOfRawData 0x400
PointerToRawData 0x9600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.45873

.pdata

MD5 6d869abe3612c3808d1d3d12b4152752 🔍
SHA1 e7ac8688064b07d0f243124f4b008a29e22429a7 🔍
SHA256 8949bc8ccae29791f26a76ce845463899a14fdb4ae5a2e42ee68ff6dea9f5f6d 🔍
SHA3 0b25fa7df224f5de70d970721044b2a8579f07d0b73c2bb3c6a653245831e341 🔍
VirtualSize 0x60c
VirtualAddress 0xc000
SizeOfRawData 0x800
PointerToRawData 0x9a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_NOT_PAGED
IMAGE_SCN_MEM_READ
Entropy 3.50374

PAGE

MD5 9a9d7aac9e835035a3bd477e2e5730eb 🔍
SHA1 f4c173e276dcf466ddfb854838a136acee529a63 🔍
SHA256 f951b54dd9485fd92f9651e2d4579e402034379a0c1fe87f767cbd798e84eed3 🔍
SHA3 812809bd72a2e59bcd2e19fb3ddf40452a3b37421946d8193a28777218c17284 🔍
VirtualSize 0x120
VirtualAddress 0xd000
SizeOfRawData 0x200
PointerToRawData 0xa200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 3.80693

INIT

MD5 d976f5947c8a092987d92e27658fc3f5 🔍
SHA1 2e5708db0fc926531cb0973751ffc057afd4b1e8 🔍
SHA256 36b321e72a087dac8edf0760899fbe80efa7ea448b408392478aba03bf0a473e 🔍
SHA3 082e3de272a44dc0ba0cae1b9db88cd2192ceceef262bcd8092c27927162f85b 🔍
VirtualSize 0xb40
VirtualAddress 0xe000
SizeOfRawData 0xc00
PointerToRawData 0xa400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.54181

.rsrc

MD5 43a4b714225943fe2088686a5af529d0 🔍
SHA1 514775711bdc9ca402cd59e954fd8ffcf4aadafc 🔍
SHA256 b88d8587bc85b533e1b5ec022b95f0cabb0207aed3a0a816ffc3e2c8eba9b340 🔍
SHA3 4cbd8c272839f83a3f80c1c4d1c066327b10a53e81d2d68020ce747ac070ffed 🔍
VirtualSize 0x418
VirtualAddress 0xf000
SizeOfRawData 0x600
PointerToRawData 0xb000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.51783

.reloc

MD5 31b97101bb0c7dffee7ebcc29f77ace2 🔍
SHA1 e05e4a9bcace63cff59b69c33943b1ecb00767ea 🔍
SHA256 637b68e3050b66c4f89ecf2716fda854cd365be7b5e5f60d5c077d5ec785889d 🔍
SHA3 530ddec8cd6d46685964ca5b92913b6ad1c54545eaa7a79ccce939fd45bbe6db 🔍
VirtualSize 0xee
VirtualAddress 0x10000
SizeOfRawData 0x200
PointerToRawData 0xb600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 1.3515

Imports

ntoskrnl.exe KeClearEvent
ExFreePoolWithTag
IoRegisterDeviceInterface
IoDeleteDevice
KeSetEvent
KeInitializeEvent
IoDetachDevice
PoSetPowerState
IofCompleteRequest
IoAttachDeviceToDeviceStack
IoIsWdmVersionAvailable
IoInitializeRemoveLockEx
IoCreateDevice
IoAllocateWorkItem
KeWaitForSingleObject
IoQueueWorkItem
PoStartNextPowerIrp
PoCallDriver
IofCallDriver
ZwReadFile
RtlInitUnicodeString
ZwCreateFile
ZwClose
ZwQueryInformationFile
IoAcquireRemoveLockEx
IoSetDeviceInterfaceState
RtlFreeUnicodeString
IoReleaseRemoveLockAndWaitEx
ObfReferenceObject
IoReleaseRemoveLockEx
KeAcquireSpinLockRaiseToDpc
IoCancelIrp
IoFreeWorkItem
IoGetDeviceProperty
IoFreeIrp
IoAllocateIrp
IoBuildDeviceIoControlRequest
KeSetImportanceDpc
IoFreeMdl
KeInsertQueueDpc
MmUnlockPages
MmUnmapLockedPages
IoBuildPartialMdl
KeInitializeDpc
IoAllocateMdl
RtlGUIDFromString
IoReportTargetDeviceChangeAsynchronous
ProbeForRead
ProbeForWrite
RtlUnicodeStringToAnsiString
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
RtlQueryRegistryValues
IoOpenDeviceRegistryKey
KeBugCheckEx
ExFreePool
KeReleaseSpinLock
PoRequestPowerIrp
ExAllocatePoolWithTag
__C_specific_handler
USBD.SYS USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
USBD_GetUSBDIVersion

Delayed Imports

1

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x3b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.51828
MD5 df484c2be3598fb14d7324bd7db284b4 🔍
SHA1 214c5eb21fcf02a4ff7fa1a9ff64a278dfdb9cdd 🔍
SHA256 6a54727558fa89f01a32f753c798a47ab90459fc13ede843a049c8fdc3a76951 🔍
SHA3 2d94cbf6e5f74aea483ef6196a6f4d590ea12b1539c79a4de2660811b432ff7f 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 3.4.1.20
ProductVersion 3.4.1.20
FileFlags VS_FF_PRIVATEBUILD
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName Cypress Semiconductor
FileDescription Cypress Generic USB Device Driver-Release 3.4
FileVersion (#2) 3.04.0001.20 built by: WinDDK
InternalName CyUsb.sys
LegalCopyright Copyright(C) Cypress Semiconductor 2004-2009
OriginalFilename CyUsb.sys
ProductName Cypress Generic USB Device Driver-Release 3.4
ProductVersion (#2) 3.04.0001.20
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2009-Jun-05 10:41:49
Version 0.0
SizeofData 137
AddressOfRawData 0xa6a8
PointerToRawData 0x90a8
Referenced File c:\views\cysuiteusb_build_view\software\products\hsusb\cysuiteusb\cyusb_sys\src\objfre_wlh_amd64\amd64\cyusb.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0xa1c13a34
Unmarked objects 0
Total imports 70
Imports (VS2012 build 50727 / VS2005 build 50727) 5
ASM objects (VS2012 build 50727 / VS2005 build 50727) 3
C objects (VS2012 build 50727 / VS2005 build 50727) 3
113 (VS2012 build 50727 / VS2005 build 50727) 32
Resource objects (VS2012 build 50727 / VS2005 build 50727) 1
Linker (VS2012 build 50727 / VS2005 build 50727) 1

Errors

Leave a comment

No comments yet.